An improper authentication control vulnerability exists in AiCloud
ASUS · Router
An improper authentication control flaw in the AiCloud component of ASUS Router products can be triggered by a crafted request. Remote, unauthenticated attackers who can reach the device over the network without user interaction may be able to execute functions without authorisation.
An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 7 months after disclosure. Public exploit code (PoC-in-GitHub) appeared 13 months after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+7 mo
- Public exploit codePoC-in-GitHub+13 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 8 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Continues building ORB networks using new malware13 Jul 2026
- Continues building ORB networks using new malware7 Jul 2026
- Thousands of ASUS Routers Hijacked in Global Operation "WrtHug" in a Suspected China-Backed Campaign24 Nov 2025
- Operation WrtHug, The Global Espionage Campaign Hiding in Your Home Router21 Nov 2025
- Phishing Emails Impersonating a Popular OTT Service - ASEC20 Nov 2025
- 50,000 ASUS Routers Hijacked by China-Linked “WrtHug” Operation for Global Espionage20 Nov 2025
- 2 more on OTX