ASUS Router App up to 1.0.0.9.71 on Android improper export of android application components

Summaryinfo

A vulnerability marked as critical has been reported in ASUS Router App up to 1.0.0.9.71 on Android. This affects an unknown part. The manipulation leads to improper export of android application components. This vulnerability is uniquely identified as CVE-2026-12960. Local access is required to approach this attack. No exploit exists.

Detailsinfo

A vulnerability was found in ASUS Router App up to 1.0.0.9.71 on Android. It has been rated as problematic. This issue affects an unknown code. The manipulation with an unknown input leads to a improper export of android application components vulnerability. Using CWE to declare the problem leads to CWE-926. The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains. Impacted is confidentiality. The summary by CVE is:

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS Security Advisory for more information.

The weakness was disclosed by Sedric Louissaint. The advisory is shared at asus.com. The identification of this vulnerability is CVE-2026-12960 since 06/23/2026. The exploitation is known to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Router Operating System

Vendor

• ASUS

Name

• Router App

Version

• 1.0.0.9.0
• 1.0.0.9.1
• 1.0.0.9.2
• 1.0.0.9.3
• 1.0.0.9.4
• 1.0.0.9.5
• 1.0.0.9.6
• 1.0.0.9.7
• 1.0.0.9.8
• 1.0.0.9.9
• 1.0.0.9.10
• 1.0.0.9.11
• 1.0.0.9.12
• 1.0.0.9.13
• 1.0.0.9.14
• 1.0.0.9.15
• 1.0.0.9.16
• 1.0.0.9.17
• 1.0.0.9.18
• 1.0.0.9.19
• 1.0.0.9.20
• 1.0.0.9.21
• 1.0.0.9.22
• 1.0.0.9.23
• 1.0.0.9.24
• 1.0.0.9.25
• 1.0.0.9.26
• 1.0.0.9.27
• 1.0.0.9.28
• 1.0.0.9.29
• 1.0.0.9.30
• 1.0.0.9.31
• 1.0.0.9.32
• 1.0.0.9.33
• 1.0.0.9.34
• 1.0.0.9.35
• 1.0.0.9.36
• 1.0.0.9.37
• 1.0.0.9.38
• 1.0.0.9.39
• 1.0.0.9.40
• 1.0.0.9.41
• 1.0.0.9.42
• 1.0.0.9.43
• 1.0.0.9.44
• 1.0.0.9.45
• 1.0.0.9.46
• 1.0.0.9.47
• 1.0.0.9.48
• 1.0.0.9.49
• 1.0.0.9.50
• 1.0.0.9.51
• 1.0.0.9.52
• 1.0.0.9.53
• 1.0.0.9.54
• 1.0.0.9.55
• 1.0.0.9.56
• 1.0.0.9.57
• 1.0.0.9.58
• 1.0.0.9.59
• 1.0.0.9.60
• 1.0.0.9.61
• 1.0.0.9.62
• 1.0.0.9.63
• 1.0.0.9.64
• 1.0.0.9.65
• 1.0.0.9.66
• 1.0.0.9.67
• 1.0.0.9.68
• 1.0.0.9.69
• 1.0.0.9.70
• 1.0.0.9.71

License

• commercial

Website

• Vendor: https://www.asus.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion