Description
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
Medium · 6.5
CVE-2025-56007
EUVD-2025-35693GHSA-p69p-39vf-6x53
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with f…
Published Oct 23, 2025 · Updated May 20, 2026 · Assigned by mitre