One Exported Service, Six Free Rides: How I Found CVE-2026-12960 in the ASUS Router App
I went looking for something clever in the ASUS Router Android app and instead found a service sitting wide open with a sign on it. Here is the whole story: the manifest, the Parcelable, the six payloads, and the wait for a fix.