{"vulnerability": "CVE-2026-14911", "sightings": [{"uuid": "2e4b1370-a572-4dc8-a78f-6815bab9eabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14911", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxb32r4ipy22", "content": "\ud83d\udea8 CVE-2026-14911 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Input During Web Page Generation (\u201cCross-site Scripting\u201d) in ASUS router modules...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14911\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T04:07:38.379118Z"}, {"uuid": "b6488e65-f8a1-4145-924f-85f6b0c6af93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117398098681807664", "content": "ASUS Router XSS (CVE-2026-14911, CRITICAL, CVSS 9.3): Remote attackers can exploit improper input neutralization to execute scripts, alter settings, or cause DoS if visited by authenticated users. No patch yet. Details: https://radar.offseq.com/threat/cve-2026-14911-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-81fca42ab40cabc9 #OffSeq #XSS #Cybersecurity", "creation_timestamp": "2026-10-07T06:00:24.781831Z"}, {"uuid": "11576d29-1d2d-4bc4-854a-8bc01704e8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxbbehdebr2l", "content": "ASUS Routers face a CRITICAL XSS flaw (CVE-2026-14911, CVSS 9.3). Exploitable via crafted URLs \u2014 attackers can change settings or cause DoS. No patch yet; avoid untrusted links while authenticated. https://radar.offseq.com/threat/cve-2026-14911-cwe-79-improper-neutralization-of-input-during-web-p...", "creation_timestamp": "2026-10-07T06:00:26.999799Z"}, {"uuid": "d1730d5d-5f44-4676-a6be-30bad38dd4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14911", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-asus-2", "content": "", "creation_timestamp": "2026-10-07T00:27:48.000000Z"}, {"uuid": "bf84b785-c541-417d-8d6b-7af4b194a2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14911", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxczrukyup2x", "content": "CVE-2026-14911 - router\nThe web interface of certain ASUS router models does not properly filter malicious code in web pages. An attacker who sends a specially crafted URL can make an authenticated user\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#router #asus #CVE #infosec", "creation_timestamp": "2026-10-07T22:50:06.448668Z"}]}