ASUS patches two flaws that turn a VPN profile into command execution

On October 1, 2026, ASUS published CVE-2026-14157 and CVE-2026-13313, two flaws in its routers’ web admin interface that both lead to command execution, up to root. Inventory your ASUS routers, update the firmware, and pull the admin page off WAN access before the window closes.