Keenetic Keeneticos
3 CVEs affecting Keenetic Keeneticos. Latest disclosed: 2025-10-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-56007 | Medium | 6.5 | 2025-10-23 | CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by m… |
CVE-2025-56008 | Medium | 6.1 | 2025-10-23 | Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via… |
CVE-2025-56009 | Medium | 5.3 | 2025-10-23 | Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional… |