CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-26202

CVE-2025-26202 describes a Cross-Site Scripting (XSS) vulnerability in the WPA/WAPI Passphrase field of the Wireless Security settings on the DZS Router Web Interface (2.4 GHz & 5 GHz). An authenticated attacker can inject malicious JavaScript into the passphrase, which is stored and later execut...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...