New ASUS firmware patches critical AiCloud vulnerability

ASUS has released new firmware to address nine security vulnerabilities, including a critical authentication bypass flaw (CVE-2025-59366) in routers with AiCloud enabled, which has a CVSS score of 9.2. The company advises users to update their router firmware immediately to mitigate these vulnerabilities. The firmware updates are available for various series, including 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102.

ASUS also recommends using strong, unique passwords and disabling internet-facing services for end-of-life models to enhance security. Recent campaigns have targeted outdated ASUS routers, exploiting multiple vulnerabilities to create a global botnet.