{"vulnerability": "cve-2026-14157", "sightings": [{"uuid": "d4b04a17-3c82-48bd-8564-d9c7dd60cf4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14157", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117363417227718907", "content": "ASUS Routers hit by CRITICAL vuln: CVE-2026-14157 (CVSS 9.4). Remote authenticated users can execute arbitrary commands via crafted file upload in web interface. Restrict access, monitor closely. https://radar.offseq.com/threat/cve-2026-14157-cwe-134-use-of-externally-controlled-format-string-in-asus-router-2ad64f03a537627f #OffSeq #CVE202614157 #ASUS #Vuln #BlueTeam", "creation_timestamp": "2026-10-01T03:00:27.938863Z"}, {"uuid": "0e2670d3-21ad-4911-ae0b-7674b8bc453c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14157", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwruj5w7p72q", "content": "ASUS Router flaw CVE-2026-14157 (CRITICAL, CVSS 9.4) allows remote authenticated code execution via crafted file upload. Limit web management access & monitor logs. https://radar.offseq.com/threat/cve-2026-14157-cwe-134-use-of-externally-controlled-format-string-in-asus-router-2ad64f03a537627f #O...", "creation_timestamp": "2026-10-01T03:00:30.467502Z"}, {"uuid": "8ba9e704-cfce-455d-a5df-768589cbac95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jhx5adl6xdvap", "content": "CVE-2026-14157 - ASUS Router Format String Vulnerability\nCVE ID : CVE-2026-14157\n \n Published : Oct. 1, 2026, 2:16 a.m. | 23\u00a0minutes ago\n \n Description : Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbit...", "creation_timestamp": "2026-10-01T03:02:06.271353Z"}, {"uuid": "1948cfcb-211e-48bc-acb2-5e69b0e16a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14157", "type": "seen", "source": "https://gist.github.com/ichintu/9de11ee4aa83b9a4a66eff9883b8a595", "content": "This cyber threat intelligence digest highlights multiple critical and high-severity vulnerabilities impacting network and enterprise infrastructure:\n\n\u2022 **ASUS Routers:** Two authenticated remote flaws (CVE-2026-14157 & CVE-2026-13313) allow attackers to execute arbitrary commands and gain root access via Telnet.\n\u2022 **Zimbra Collaboration Suite:** CVE-2026-73570 is actively being exploited to compromise email backups and authentication credentials.\n\u2022 **DeepWiki-Open:** CVE-2026-103591 enables unauthenticated attackers to read arbitrary system files through a vulnerable API endpoint.\n\u2022 One submission contains only metadata with no actionable content.\n\nOrganizations should prioritize patching affected systems, disable debug/Telnet services where possible, and monitor for active exploitation.", "creation_timestamp": "2026-10-01T04:00:29.000000Z"}, {"uuid": "3375dc05-e04d-477c-b50c-4545c70f0ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14157", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwryafk4fw2u", "content": "\ud83d\udea8 CVE-2026-14157 \u2014 CVSS 9.4 CRITICAL\n\nUse of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14157\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T04:07:10.410038Z"}, {"uuid": "c4f2bab5-ce3a-4332-b2e6-8a42dec60b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14157", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cvu2hs2u", "content": "Daily IT Security Digest \u2014 2026-10-01\ncaution.\n- https://infosec.exchange/@offseq/117359878484452956\n- https://infosec.exchange/@offseq/117348199543861461\n\n## 3. ASUS Router Critical Zero-Day (CVE-2026-14157) \u2014 CVSS 9.4\nA critical format string vulnerability (CVE-2026-14157, CVSS 9.4) in ASUS Router", "creation_timestamp": "2026-10-01T05:02:15.852000Z"}, {"uuid": "7061ccfe-de7b-437f-9ffe-dd529156cefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14157", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cwfn4h2z", "content": "Daily IT Security Digest \u2014 2026-10-01\nhttps://stemshop.top/cve/CVE-2026-14157\n\n## 4. Kiteworks Email Protection Gateway SSRF \u2014 CVSS 9.1\nCVE-2026-102105 is a critical server-side request forgery vulnerability in Kiteworks Email Protection Gateway versions below 9.5.0, enabling remote attackers to", "creation_timestamp": "2026-10-01T05:02:16.429910Z"}]}