CVE-2025-44619 Misconfiguration in n/a

Critical 9.1 Published 30 May 2025 Updated 5 Jul 2026

Attackers can join the open Wi-Fi network of Tinxy WiFi Lock Controllers without authentication, bypassing access controls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-44619?

CVE-2025-44619 is a critical vulnerability in n/a, published on 30 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.

Weakness: CWE-284

Which versions are affected by CVE-2025-44619?

It affects 1 product.

Products include Tinxy Wifi Lock Controller V1 Rf Firmware.

How do I fix CVE-2025-44619?

No fix has been published for CVE-2025-44619 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-44619 being exploited?

There is no known exploitation of CVE-2025-44619 in the wild and no public exploit code.

Sources

Also known as GHSA-84x2-p8rx-5q4g.