TL;DR ASUS issued four security alerts on November 4, 2026. These notices resolve four serious ASUS security vulnerabilities in router firmware and PC software. The worst bug lets adjacent attackers gain root control on routers. Therefore, users must install the latest patches right away. They need to protect their devices from harm. Why It Matters ASUS routers and laptops support millions of homes and small offices worldwide.

At a Glance Malware Family Doorway botnet (modular Rust scanning and delivery engine with staged loaders) Threat Actor Unattributed operator group known internally as "the team" (suspected commercial proxy network builder) Target / Victims Routers, IP cameras, digital video recorders, optical network terminals, and enterprise Java servers (4,217 logged IPs and 1,772 mapped victim devices across 75+ territories) Delivery Vector…

This vulnerability affects D-Link DIR-505 version 1.10B02 and is located in the Web Management CGI's main function within the /secmark1524.cgi file. By manipulating the arguments accu/pass/code/hash/cmds, an attacker can remotely trigger a

This vulnerability in DrayTek Vigor2960 1.5.1.6 Revision 8218 allows remote command injection via the uploadlangs function in the /cgi-bin/mainfunction.cgi component. The flaw enables attackers to execute arbitrary commands on the device wi

gain FCC approval for new routers in the U.S. read more about TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Five counts cover router security claims, Vietnam assembly and app privacy terms sold to Florida buyers, with a jury demanded. What will the defense argue?

Five counts cover router security claims, Vietnam assembly and app privacy terms sold to Florida buyers, with a jury demanded. What will the defense argue?

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with  Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight them in court. TP-Link Systems is based in

Five counts cover router security claims, Vietnam assembly and app privacy terms sold to Florida buyers, with a jury demanded. What will the defense argue?

Five counts cover router security claims, Vietnam assembly and app privacy terms sold to Florida buyers, with a jury demanded. What will the defense argue?

A Backdoor That Blends Into Calls and Video The ClingSTUN Linux backdoor has learned to hide its command activity where network defenses expect ordinary calls and video chats. The malware uses public STUN servers. As a result, its UDP traffic blends with legitimate VoIP and WebRTC streams. How ClingSTUN Abuses STUN STUN helps a device behind NAT learn its external IP address and mapped port.

TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369, scores 8.7 on CVSS 4.0 and lets a local attacker run commands on Tapo cameras. Every flaw now has a firmware fix. Why It Matters These TP-Link vulnerabilities all require access to the local network first. However, that bar is low on shared or poorly secured Wi-Fi.

TL;DR CISA published advisory ICSA-26-272-06 on September 29, 2026, for a critical MikroTik RouterOS vulnerability, CVE-2026-84411. A single crafted HTTP request can give an unauthenticated attacker root code execution. The flaw scores CVSS 9.8. Why This MikroTik RouterOS Vulnerability Matters RouterOS runs on MikroTik routers used worldwide in homes, ISPs, and business networks. CISA lists the affected sectors as communications and information technology.

Attacking a vulnerable DIR-822A router requires neither an administrative password nor any interaction from the device owner. A malicious actor simply needs to reside on the same local network and transmit a maliciously crafted DHCP packet to the router. Subsequently, this seemingly innocuous data processing error can trigger catastrophic memory corruption, abruptly halt critical network services, or pave the way for arbitrary code execution.

TL;DR Security researchers published technical details and a functional exploit for a critical D-Link DAP-1360 vulnerability. Tracked as CVE-2026-95675, this flaw allows unauthenticated attackers to execute operating system commands as root. Network administrators must decommission affected devices immediately because no security patches will be released. Why It Matters This security flaw carries a critical CVSS score of 9.3. Telemetry suggests that thousands of legacy access points remain in operation globally.

TL;DR Security researchers revealed two severe D-Link DIR-822A vulnerabilities impacting wireless networking hardware. The flaws allow unauthenticated local attackers to trigger stack buffer overflows and execute arbitrary code. Crucially, full technical details of the vulnerability and functional proof-of-concept exploit code have been publicly disclosed. Why It Matters Network routers form the first defensive perimeter for connected homes and small offices. Sourced market estimates indicate that thousands of consumers deploy D-Link DIR-822A routers worldwide.

Security researchers at CERT Polska disclosed several critical T-Mobile 5G Box vulnerabilities. These severe software flaws impact Wistron NeWeb Corporation (WNC) routers. Hackers can exploit these bugs to bypass authentication entirely. They can also execute malicious system commands. Administrators must patch their routers immediately to stop unauthorized access. Why This Matters Internet service providers distribute these 5G routers to thousands of residential and business customers.

This vulnerability affects D-Link DWR-M921 firmware version 1.1.52. It arises from improper sanitization of the folderpath parameter passed to the system function in /boafrm/formDiskCreateShare, enabling remote OS command injection. The vul

This vulnerability involves an off-by-one error in the tunnel_set_params function of the L2TP Control Message Parser component in the D-Link DIR-605 B1v202WWB03 router. The flaw arises from improper handling of the peer_hostname argument, w

TP-Link disclosed two vulnerabilities in the Archer AX55 v4 router on September 3, 2026. One flaw can crash the mesh service and may allow remote code execution. The other exposes the admin password to a local attacker. Both affect the popular Wi-Fi 6 home router. Why the TP-Link Archer AX55 vulnerability matters The Archer AX55 is a widely deployed Wi-Fi 6 router in homes and small offices.

No one sets up a new router expecting to leave the door open. Researchers checked what ships out of the box across 14 major brands, and found the door was open more often than not.