8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)

ASUS has issued an urgent security update addressing eight vulnerabilities in various router models, with the most critical being an Authentication Bypass (CVE-2025-59366) in AiCloud, rated CVSS 9.4. Other significant vulnerabilities include a Path Traversal issue in WebDAV (CVE-2025-12003, CVSS 8.2) and two vulnerabilities in the bwdpi component (Command Injection and SQL Injection, both CVSS 7.5). Additional medium-to-high severity flaws include Stack Buffer Overflow, Path Traversal, and Integer Underflow. Users are strongly advised to update their router firmware to the latest version to mitigate these risks.