What is CVE-2025-65212?

CVE-2025-65212 is a critical-severity vulnerability in Njhyst Hy511, classified under Reliance on Cookies without Validation and Integrity Checking. CVSS score: 9.8/10. Published 2026-01-06.

How severe is CVE-2025-65212?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Njhyst Hy511

CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and dow…

EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Njhyst Hy511
Njhyst Hy511_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-565 — Reliance on Cookies without Validation and Integrity Checking

References

cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2025-65212?: CVE-2025-65212 is a critical-severity vulnerability in Njhyst Hy511, classified under Reliance on Cookies without Validation and Integrity Checking. CVSS score: 9.8/10. Published 2026-01-06.
How severe is CVE-2025-65212?: Critical severity. CVSS v3 base score is 9.8 out of 10.