https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:44:36.752432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3758 CVE-2025-3758 — Exposure of Device Configuration without Authentication in WF2220 2026-10-06T22:44:36.768686+00:00

Affected: Netis Systems WF2220

WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way.