What’s Vulnerable › Vulnerabilities

CVE-2025-59371

• Severity: high (CVSS 7.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-25 · updated 2026-10-18
• Weakness: CWE-330

Description

An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Router: 3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102

References

• https://www.asus.com/security-advisory/

Get alerted when CVE-2025-59371 or the next vulnerability affects your stack