Skip to content

CVE-2025-2492

CVE

Threat entity extracted from intelligence sources

Frequency
11
occurrences
First Seen
November 14, 2025
Last Seen
July 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

The China-linked threat actor UAT-7810 is evolving its malware toolkit, notably introducing LONGLEASH, an upgraded version of the SHORTLEASH backdoor. This group exploits known vulnerabilities in unpatched Ruckus routers and recently began targeting ASUS AiCloud routers. The malware facilitates the...

Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control of unpatched devices exposed online. A firmware update has been released to addres...

ASUS has reported critical authentication bypass vulnerabilities affecting its AiCloud and DSL series routers. The vulnerabilities, tracked as CVE-2025-59366 and CVE-2025-59367, allow unauthenticated remote attackers to gain control over affected devices. Users are urged to update their firmware to...

The Indian Computer Emergency Response Team (CERT-In) has issued a critical alert regarding an authentication bypass vulnerability, tracked as CVE-2025-59367, affecting several Asus DSL-series Wi-Fi routers. This flaw allows remote attackers to gain unauthorized access to devices without user intera...

Public Exploits

Checking GitHub for proof-of-concept code…