CVE-2025-10159

An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MR7).

Score

CVSS 3.1 9.8 Critical

Status

Deferred - security-alert@sophos.com

Published

2025-09-09

Last modified

2025-09-10

Weaknesses

CWE-620

Affected products

• Ap6 Series Wireless Access Points (Sophos)

References

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20250909-ap6