On February 19, 2026, the US Cybersecurity and Infrastructure Security Agency warned that critical flaws in some Netgear and ASUS small office and home office routers could let attackers take control of a device remotely, which matters because your router is the front door to your whole network.
CISA said the issue can allow remote code execution without authentication on affected devices, meaning an attacker may not need a login to run commands on the router.
If a router is compromised, an attacker can potentially watch or redirect business traffic, steal passwords in transit, and use the router as a foothold to reach file shares, point of sale systems, and cloud admin accounts.
The alert is aimed at routers commonly used by small businesses and remote workers, so the risk is not limited to your office network if team members use the same brands at home.
Start by identifying the exact router model and current firmware version for every location that touches company work, including home offices used for accounting, payroll, or customer support.
Then apply the manufacturer firmware update that CISA and the vendors point to, and confirm the update actually installed by rechecking the firmware version after the reboot.
If you cannot patch quickly, consider taking basic exposure reducers right away such as turning off remote administration, disabling features you do not use, and removing any port forwards that expose the router management page to the internet.
Also plan a password reset for router admin accounts and Wi Fi, since a takeover often leads to credential theft or configuration changes that persist after a simple restart.
CISA’s alert includes the official guidance and links to vendor updates, and it is the best starting point for checking whether your model is affected at CISA router vulnerability alert.
Additional reporting and step by step context is available from BleepingComputer’s coverage, which may help if you are validating impact across multiple sites.
Next, watch for follow up vendor advisories and any updates to CISA’s guidance, since affected model lists and fixed firmware versions can change as more devices are confirmed.
