Keeneticos

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorKeenetic (e84d109f-5090-544d-a2e3-6df539f480f8)
ProductKeeneticos (b035d01b-dfec-50d4-a653-3c17d88344b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/keenetic/keenetic-sdk purl2cpe 2026-06-01 10:18:09.701831

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-56009 vulnerable 2026-06-08 07:33:15.416904 Details available
Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
Published: 2025-10-23T00:00:00.000Z
Updated: 2026-05-20T17:58:40.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56008 vulnerable 2026-06-08 07:33:15.416630 Details available
Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.
Published: 2025-10-23T00:00:00.000Z
Updated: 2026-05-20T17:57:11.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56007 vulnerable 2026-06-08 07:33:15.416169 Details available
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
Published: 2025-10-23T00:00:00.000Z
Updated: 2026-05-20T17:55:15.965Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.