CVE-2025-68717 - KAYSUS KS-WR3600 Router Authentication Bypass Vulnerability

CVE ID : CVE-2025-68717 Published : Jan. 8, 2026, 9:15 p.m. | 1 hour, 42 minutes ago Description : KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication. Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor