CVE-2025-8761

A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-404

• https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf
• https://vuldb.com/?ctiid.319864
• https://vuldb.com/?id.319864

Published

Aug 13, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8755A vulnerability was found in macrozheng mall up to 1.0.3 and…5.5
• CVE-2025-8756A vulnerability has been found in TDuckCloud tduck-platform …8.8
• CVE-2025-8757A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and c…7
• CVE-2025-8758A vulnerability was found in TRENDnet TEW-822DRE FW103B02. I…7
• CVE-2025-8759A vulnerability was found in TRENDnet TN-200 1.02b02. It has…5.9
• CVE-2025-8760A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 B…9.8
• CVE-2025-8762A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build …6.8
• CVE-2025-8763A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. I…6.3
• CVE-2025-8764A vulnerability classified as critical has been found in lin…5.4
• CVE-2025-8765A vulnerability classified as problematic was found in Datac…3.5
• CVE-2025-8766A container privilege escalation flaw was found in certain M…6.4
• CVE-2025-8767The AnWP Football Leagues plugin for WordPress is vulnerable…4.8