ASUS warns of critical auth bypass flaw in DSL series routers

ASUS has released firmware 1.1.2.3_1010 to fix a critical authentication-bypass vulnerability (CVE-2025-59367) affecting several DSL router models (DSL-AC51, DSL-N16, DSL-AC750); attackers can remotely log into unpatched devices without authentication. ASUS urges immediate updating or mitigations (disable WAN remote access, port forwarding, DDNS, VPN server, DMZ, FTP, etc.); while no active exploitation is reported, prior exploitation of ASUS router flaws by groups building botnets increases the urgency to patch.