CVE-2025-68716 Hardcoded credentials in n/a
KAYSUS routers allow root SSH access without a password by default, enabling LAN attackers to execute arbitrary commands with full privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-68716?
CVE-2025-68716 is a high-severity vulnerability in n/a, published on 8 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface. The root account is configured with no password, and administrators cannot disable SSH or enforce authentication via the CLI or web GUI. This allows any LAN-adjacent attacker to trivially gain root shell access and execute arbitrary commands with full privileges.
Which versions are affected by CVE-2025-68716?
It affects 1 product.
Products include Kaysus Ks-Wr3600 Firmware.
How do I fix CVE-2025-68716?
No fix has been published for CVE-2025-68716 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-68716 being exploited?
There is no known exploitation of CVE-2025-68716 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hmrc-7mh9-vqh3.