CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

A Cross-Site Scripting (XSS) vulnerability exists in the DZS ZNID-GPON-2428B1-0ST router web interface, specifically within the WPA/WAPI Passphrase field for both 2.4GHz and 5GHz bands. The root cause is the lack of input validation, allowing an authenticated attacker to inject and store maliciou...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...