Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control of unpatched devices exposed online. A firmware update has been released to addres...
CVE-2025-64756 identifies a command injection vulnerability in the glob CLI affecting versions 10.3.7 to 11.0.3. CVE-2025-64446 reveals a relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0 to 8.0.1 and earlier, allowing attackers to execute administrative commands via crafted...
ASUS has reported critical authentication bypass vulnerabilities affecting its AiCloud and DSL series routers. The vulnerabilities, tracked as CVE-2025-59366 and CVE-2025-59367, allow unauthenticated remote attackers to gain control over affected devices. Users are urged to update their firmware to...
Operation WrtHug has hijacked approximately 50,000 ASUS routers globally, primarily targeting end-of-life models. The campaign is believed to be linked to Chinese threat actors and exploits multiple vulnerabilities, affecting users mainly in Taiwan, the United States, Russia, and Southeast Asia.
