Search/CVE-2026-12960
● CVE

CVE-2026-12960

DiscoveredJul 3, 2026UpdatedSep 17, 2026

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS Security Advisory for more information.

CVSS v3.1
—
EPSS
0.16%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 26, 2026
▲ 0.04pp
0.12% → 0.16% over 2 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Jul 3, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 17, 2026
Public PoC (1)
Unverified third-party code — review before executing.