CVE-2025-26202-Details

CVE-2025-26202-Détails CVE-2025-26202 : Cross-Site Scripting XSS dans l'interface Web du routeur DZS Description Une vulnérabilité Cross-Site Scripting XSS existe dans le champ WPA/WAPI Passphrase des paramètres de sécurité sans fil bandes 2,4 GHz et 5 GHz de l'interface Web du routeur DZS. Un...

The vulnerability in the DZS router’s web interface allows a attacker to execute XSS attacks.

The vulnerability in the DZS router’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

EUVD-2025-6179

Malicious code in bioql PyPI...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

A Cross-Site Scripting (XSS) vulnerability exists in the DZS ZNID-GPON-2428B1-0ST router web interface, specifically within the WPA/WAPI Passphrase field for both 2.4GHz and 5GHz bands. The root cause is the lack of input validation, allowing an authenticated attacker to inject and store maliciou...

CVE-2025-26202: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...