High severity7.4NVD Advisory· Published Sep 8, 2025· Updated Apr 15, 2026
CVE-2025-41708
CVE-2025-41708
Description
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.