CVE-2025-41692

Medium · 6.8

CVSS

6.8

EPSS

0.3%

Published

Dec 9, 2025

CISA due date

—

The record

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

Affected packages

Ecosystem	Package	Introduced	Fixed