CVE Watchtower


← Back to CVE List

CVE-2025-59366NVD

Vulnerability Summary

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.


Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.
Severity Level
CRITICAL(9.2)
Published Date
Nov 25, 2025
Last Modified
Nov 25, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone