CVE-2025-67446
Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value (e.g., setting it to "admin"), an attacker can bypass the authentication schema and gain unauthorized access to admin functionalities.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Deferred - cve@mitre.org
- Published
- 2026-06-04
- Last modified
- 2026-06-04
- Weaknesses
- CWE-384
References
- https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67446
- https://neterbit.com/
