CVE-2026-19396
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing session.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
타임라인
🎭 이 CVE, 다음 위협조직 관련 보도와 함께 언급됨: Volt Typhoon Scattered Spider