TI-2025-05663 CVE-2025-6260 · GHSA-wj97-j26v-v8wp
Network Thermostat X-Series WiFi Thermostats Missing Authentication for Critical Function
Priority MEDIUM 49
The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the Internet via a router with port forwarding set u…