What is CVE-2025-11126?

CVE-2025-11126 is a critical-severity vulnerability in Apeman Id71, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2025-09-29.

How severe is CVE-2025-11126?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Apeman Id71

CVE-2025-11126

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.006 (45.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apeman Id71 — versions 218.53.203.117

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)

Frequently asked questions

What is CVE-2025-11126?: CVE-2025-11126 is a critical-severity vulnerability in Apeman Id71, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2025-09-29.
How severe is CVE-2025-11126?: Critical severity. CVSS v3 base score is 9.8 out of 10.