Ruckuswireless vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ruckuswireless products: 2 record(s), with severity, exploitation and fixes.

Ruckus Wireless Admin 1 Smartzone Ap 1 Ruckus Unleashed 1

Exploited only (KEV) →

CVE-2025-63735 Medium · 6.1 CWE-79 Nov 25, 2025

Cross-site Scripting (XSS) in Ruckuswireless Ruckus Unleashed

A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.

CVE-2023-25717 Critical · 9.8 KEV High · 67 Public exploit CWE-94 Feb 13, 2023

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.