CVE-2025-67446
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Jun 4, 2026
CISA due date
—
The record
Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value (e.g., setting it to "admin"), an attacker can bypass the authentication schema and gain unauthorized access to admin functionalities.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-384
- CVE-2026-64857 tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. CWE-384
- CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to… CWE-384
- CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could result in… CWE-384
- CVE-2026-86279 A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management &… CWE-384
- CVE-2026-85238 MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom… CWE-384
- CVE-2026-84652 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the… CWE-384
- CVE-2026-18527 IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i… CWE-384