CVE-2025-59366CWE-22CWE-78path-traversalcommand-injection
CVE-2025-59366
published November 25, 2025
What it is
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.
Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.
The record
Technical detail
- CVSS
- 9.2 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.15760 · 96.9th percentile
- Weaknesses
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Published
- 2025-11-25T13:15Z
References (1)
EPSS history
Timeline