Medium · 6.1 CVE-2025-56008 EUVD-2025-35692GHSA-82pw-p4cc-5522

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to tak…

Published Oct 23, 2025 · Updated May 20, 2026 · Assigned by mitre

Description

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.

References

https://keenetic.com/
https://keenetic.com/global/security#october-2025-web-api-vulnerabilities
https://github.com/notdenied/writeups/blob/main/CVE/CVE-2025-56008.md