Asus Patches Critical Router Vulnerabilities Affecting VPN Configurations

Asus has released firmware updates to address two critical vulnerabilities in its routers—CVE-2026-14157 (CVSS 9.4) which permits arbitrary command execution via malicious VPN configuration files, and CVE-2026-13313 (CVSS 8.9) which grants Telnet root access. Both affect devices running firmware version 3.0.0.6_102; users are advised to update immediately, use trusted VPN configuration files, and set strong passwords on unsupported routers. Asus also patched a separate high-severity issue affecting 13 motherboards that could allow physical access to system memory.