CVE-2025-59366

State: Published
Severity: 9.2 Critical
Published: Nov 25, 2025
Updated: Feb 26, 2026
Reserved: Sep 15, 2025

Description

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.

Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

Scores

CVSS	Score	Vector	Source
4.0	9.2 Critical	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	ASUS

Weaknesses

CWE-22 Path Traversal
CWE-78 OS Command Injection

Affected Products

Product	Versions
RouterASUS	3.0.0.4_386Affected 3.0.0.4_388Affected 3.0.0.6_102Affected

References

https://www.asus.com/content/security-advisory/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.