CVE-2025-68716

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to trivially gain root shell access and execute arbitrary commands with full privileges.

• CWE-284
• CWE-306
• CWE-521

• https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68716.txtThird Party Advisory
• https://github.com/actuator/cve/tree/main/KAYSUSThird Party Advisory
• https://www.kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.htmlProduct

Published

Jan 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6871A vulnerability classified as critical has been found in Sou…9.8
• CVE-2025-68710Easyelife App lock (aka Fingerprint,Applock or locker.app.sa…2.4
• CVE-2025-68711AppLockZ App Lock and Fingerprint Lock (applock.passwordfing…2.4
• CVE-2025-68712SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android al…5.5
• CVE-2025-68713An issue was discovered in Rakuten Send Anywhere (File Trans…8
• CVE-2025-68715An issue was discovered in Panda Wireless PWRU0 devices with…9.1
• CVE-2025-68717KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authe…9.4
• CVE-2025-68718KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TE…5.4
• CVE-2025-68719KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle c…8.8
• CVE-2025-6872A vulnerability classified as critical was found in SourceCo…7.2
• CVE-2025-68721Axigen Mail Server before 10.5.57 contains an improper acces…8.1
• CVE-2025-68722Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 …8.8