CVE-2025-65011

The record

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Affected packages

Related vulnerabilities

• CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
• CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
• CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
• CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
• CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
• CVE-2026-9610 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-425
• CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
• CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425