CVE-2025-59366
CRITICAL
INFO
Priority: 1.15
BB Relevance:
81/100
Published: 2025-11-25
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
AT:
Present
VC:
High
VI:
High
VA:
High
Description
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.
Weakness Classification (2)
Affected Software (3)
References & Advisories (1)
vendor-advisory