Dashboard / CVE-2025-68716

CVE-2025-68716

HIGH
MEDIUM Priority: 0.02 BB Relevance: 52/100
Published: 2026-01-08 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to trivially gain root shell access and execute arbitrary commands with full privileges.

Weakness Classification (3)

Affected Software (1)

VendorProductVersion
kaysus ks-wr3600_firmware 1.0.5.9.1

References & Advisories (3)

Bug Bounty Relevance

52 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.4 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.24%
Raw Score 0.002350
Percentile 14.6%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00235
2026-11-13
0.00235
2026-11-12
0.00235
2026-11-10
0.00235
2026-11-09
0.00235
2026-11-08
0.00235
2026-11-07
0.00235
2026-11-06
0.00235
2026-11-05
0.00235
2026-11-04
0.00235

Intelligence Sources

nvd ref →

External Links