Critical Alert 3 Active Exploits Detected Today

CVE-2026-58704 — Google Pixel Improper Authorization Vulnerability →
CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability →
CVE-2026-87886 — Acronis Backup Incorrect Default Permissions Vulnerability →
Powered by CVE Watchtower
×
September 18, 2026

CVE Watchtower

← Back to CVE List

CVE-2025-2492NVD

Vulnerability Summary

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions.


Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.
Severity Level
CRITICAL(9.2)
Published Date
Apr 18, 2025
Last Modified
Apr 21, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-288: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

External References