---
id: CVE-2025-59366
title: An authentication-bypass vulnerability exists in AiCloud
summary: >-
  An authentication-bypass vulnerability exists in AiCloud. This vulnerability
  can be triggered by an unintended side effect of the Samba functionality,
  potentially leading to allow execution of specific functions without proper
  authorizat…
severity: critical
cvss: 9.2
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-22
  - CWE-78
vendor: ASUS
product: Router
affected:
  - Router 3.0.0.4_386
  - Router 3.0.0.4_388
  - Router 3.0.0.6_102
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2025-11-26T04:55:23.450111Z'
published: '2025-11-25'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:03:06.621Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-59366'
references:
  - url: 'https://www.asus.com/content/security-advisory/'
tags:
  - cve.org
epss: 0.12455
epssPercentile: 0.96239
ingestedAt: '2026-11-05T20:33:06.568Z'
---

## Overview

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.


Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

## Affected

- `Router 3.0.0.4_386`
- `Router 3.0.0.4_388`
- `Router 3.0.0.6_102`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.