CVE-2025-68717

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user'...

PT-2026-1919

Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR3600 router version 1.0.5.9.1 Description KAYSUS KS-WR3600 routers with firmware version 1.0.5.9.1 have a flaw where authentication can be bypassed during session validation. When a user is logged in, certain API endpoints, such as...

CVE-2025-68717

The KAYSUS KS-WR3600 router, running firmware version 1.0.5.9.1 , contains a design flaw that allows for an authentication bypass during session validation. If any user is logged in, specific endpoints like /cgi-bin/system-tool may accept unauthenticated requests containing empty or invalid sessi...