CVE-2025-68717

critical · 9.4

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication.

9.4

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2026-01-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
kaysus	ks-wr3600_firmware	1.0.5.9.1
kaysus	ks-wr3600	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68717.txt
https://github.com/actuator/cve/tree/main/KAYSUS
https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-68717