Vulnerabilities

TI-2025-42189 CVE-2025-68719 · GHSA-3vfq-jv69-rjgp

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management.

MEDIUM 40

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00467 Published 2026-01-08 No fix listed CWE-200

TI-2025-42188 CVE-2025-68718 · GHSA-83vm-9w92-6cqh

LOW 24

KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials (root:12345678).

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00323 Published 2026-01-08 No fix listed CWE-200

TI-2025-42187 CVE-2025-68717 · GHSA-4cc6-4h77-4425

MEDIUM 47

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00564 Published 2026-01-08 No fix listed CWE-287

TI-2025-42186 CVE-2025-68716 · GHSA-hmrc-7mh9-vqh3

LOW 38

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LAN interface.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00235 Published 2026-01-08 No fix listed CWE-284