Story perspectives

ASUS Urges Immediate Router Updates to Fix Critical Vulnerabilities

11/28/2025

Summary

Story summary

ASUS released firmware updates to fix critical router vulnerabilities affecting the AiCloud feature.
The most severe flaw, CVE-2025-59366, has a CVSS score of 9.2 and enables unauthorized access via an authentication bypass tied to Samba.
Users are urged to update their firmware immediately or disable risky services, including AiCloud and remote access.
The updates address nine vulnerabilities, and ASUS recommends strong passwords and disabling internet-facing services on end-of-life devices.

1 of 1

Story summary

ASUS released firmware updates to fix critical router vulnerabilities affecting the AiCloud feature.
The most severe flaw, CVE-2025-59366, has a CVSS score of 9.2 and enables unauthorized access via an authentication bypass tied to Samba.
Users are urged to update their firmware immediately or disable risky services, including AiCloud and remote access.
The updates address nine vulnerabilities, and ASUS recommends strong passwords and disabling internet-facing services on end-of-life devices.