ZeusQA
Start free

Known exploited vulnerabilities

ASUS vulnerabilities attackers have used

Every ASUS vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 ASUS vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-59374, added Dec 17, 2025. Live Update has the most entries (1).

In KEV, all time
3
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Live Update (1), Routers (1), RT-AX55 Routers (1).

Every ASUS entry in CISA KEV

  1. CVE-2025-59374

    Added · due

    ASUS Live Update Embedded Malicious Code Vulnerability

    ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting…

  2. CVE-2023-39780

    Added · due

    ASUS RT-AX55 Routers OS Command Injection Vulnerability

    ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.

  3. CVE-2021-32030

    Added · due

    ASUS Routers Improper Authentication Vulnerability

    ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works