CVE-2025-59366
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba func
CVSS
—
Sem CVSS
EPSS
12.5%
p96
KEV
—
Exploit Today
29
0-100
Publicado: 25 de nov. de 2025 · Última mod.: 18 de out. de 2026 · CWE-22 · CWE-78
12.5%EPSS · 30 dias15.8%
2026-10-142026-11-11
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-194218.8 ALT—
——0Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due to insufficient validation of user-supplied TXT record values in Windows DNS operations.2hCVE-2026-1134083.3 BAI—
——0Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository7hCVE-2026-1011078.0 ALT—
——0An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp. Arbitrary commands may be executed with the root privilege by a user who can log in to the web management console of the affected product.8hCVE-2026-757857.2 ALT—
——0An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks.10hCVE-2026-748504.3 MÉD—
——0An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files.10hCVE-2026-187928.8 ALT—
——0An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.10h