https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 06:14:42 +0000 https://cve.radiocsirt.org/vuln/cve-2025-68717 <p>KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user&#39;s active session to retrieve sensitive configuration data or execute privileged actions without authentication.</p> <p>KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user&#39;s active session to retrieve sensitive configuration data or execute privileged actions without authentication.</p> https://cve.radiocsirt.org/vuln/cve-2025-68717