Medium severity6.5NVD Advisory· Published Oct 23, 2025· Updated Jun 17, 2026
CVE-2025-56007
CVE-2025-56007
Description
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*range: <4.3
- (no CPE)range: <4.3
- KeeneticOS/KeeneticOSdescription
Patches
Vulnerability mechanics
References
3- keenetic.com/global/securitynvdVendor Advisory
- keenetic.comnvdProduct
- github.com/notdenied/writeups/blob/main/CVE/CVE-2025-56007.mdnvd
News mentions
0No linked articles in our index yet.