CVE Intelligence

Keenetic vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Keenetic products: 3 record(s), with severity, exploitation and fixes.

Keeneticos 3

Exploited only (KEV) →

CVE-2025-56009 Medium · 5.3 CWE-352 Oct 23, 2025
Cross-Site Request Forgery (CSRF) in Keenetic Keeneticos
Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
CVE-2025-56008 Medium · 6.1 CWE-79 Oct 23, 2025
Cross-site Scripting (XSS) in Keenetic Keeneticos
Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.
CVE-2025-56007 Medium · 6.5 CWE-93 Oct 23, 2025
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take…
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.