Router vulnerabilities attackers are using

By brand

What to do

• Find the model and hardware version on the label under the router.
• If the row says fixed, install that firmware or newer from the maker’s own support site.
• If it says replace, the vendor will not patch it: a router exposed to the internet with a flaw attackers already use should be taken offline and replaced.
• Turn off remote management from the internet unless you need it.

How this list is kept

• A row appears when CISA adds the flaw to its Known Exploited Vulnerabilities catalog: attackers are using it, not just able to. We copy CISA’s entry and re-check the catalog every week.
• The vendor status comes from the vendor’s own advisory or end-of-life notice, tied to a short sentence on that page that a script re-reads weekly.
• “Replace: no fix” means the vendor has said the model will not be patched. A router in that state stays open to the flaw for as long as it is online.
• Check the exact model and hardware version on the label under the router; vendors often fix one hardware version and retire another.