Vulnerability Intelligence Report
CVE-2025-59366
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.
No Active Exploit Signals
CVSS Base Score
9.2
CRITICAL
EPSS Probability:15.09%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ASUS | Router | 3.0.0.4_386 (affected), 3.0.0.4_388 (affected), 3.0.0.6_102 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
15.087%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | ASUSTeK Computer Incorporation · Vendor · Taiwan |
| Reserved | 2025-09-15T01:36:47 |
| Published | 2025-11-25T07:27:02 |
| Last Updated | 2026-02-26T16:07:36 |
Community Chatter & Buzz