CVE-2022-26376

criticalpriority · track · 40EPSS 0.015 · 74 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.49% (74th) EPSS

CVSS 9.8 · critical

Is it mine?

39 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.3–9.8

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · talos-cna@cisco.com USexploitability 3.9 · impact 1.4

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787US

affected products (39)

Products and version ranges known to be affected.

Asuswrt-Merlin Asuswrt-Merlin New Gen≤ prior to 386.7enisa_euvdEU
ASUSTeK Computer Inc. Asuswrt-Merlin≤ 386.7fstec_bduRU
ASUSTeK Computer Inc. ET12≤ 3.0.0.4.386_48823fstec_bduRU
ASUSTeK Computer Inc. GT-AX11000≤ 3.0.0.4.386_49559fstec_bduRU
ASUSTeK Computer Inc. GT-AX11000 PRO≤ 3.0.0.4.386_48996fstec_bduRU
ASUSTeK Computer Inc. GT-AX6000≤ 3.0.0.4.386_48823fstec_bduRU
ASUSTeK Computer Inc. GT-AXE16000≤ 3.0.0.4.386_48786fstec_bduRU
ASUSTeK Computer Inc. RT-AX55≤ 3.0.0.4.386_49559fstec_bduRU
ASUSTeK Computer Inc. RT-AX56U≤ 3.0.0.4.386_49380fstec_bduRU
ASUSTeK Computer Inc. RT-AX58U≤ 3.0.0.4.386_48908fstec_bduRU
ASUSTeK Computer Inc. RT-AX68U≤ 3.0.0.4.386_49479fstec_bduRU
ASUSTeK Computer Inc. RT-AX82U≤ 3.0.0.4.386_49559fstec_bduRU
ASUSTeK Computer Inc. RT-AX86U≤ 3.0.0.4.386_49447fstec_bduRU
ASUSTeK Computer Inc. TUF-AX3000_V2≤ 3.0.0.4.386_48750fstec_bduRU
ASUSTeK Computer Inc. XD4≤ 3.0.0.4.386_48790fstec_bduRU
ASUSTeK Computer Inc. XD6≤ 3.0.0.4.386_49356fstec_bduRU
ASUSTeK Computer Inc. XT12≤ 3.0.0.4.386_48823fstec_bduRU
ASUSTeK Computer Inc. XT8≤ 3.0.0.4.386_48706fstec_bduRU
ASUSTeK Computer Inc. XT9≤ 3.0.0.4.388_20027fstec_bduRU
ASUSTeK Computer Inc. asuswrt≤ 3.0.0.4.386_48706fstec_bduRU

showing 20 of 39

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2022-08-05modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan