CVE-2025-5495: Netgear WNR614 URL improper authentication

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-06-03 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.

Affected products

Netgear WNR614: 1.1.0.28

References

https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/WNR614/ACL%20bypass%20Vulnerability%20in%20Netgear%20WNR614.md
https://vuldb.com/?ctiid.310911
https://vuldb.com/?id.310911
https://vuldb.com/?submit.584939
https://www.netgear.com/
https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/WNR614/ACL%20bypass%20Vulnerability%20in%20Netgear%20WNR614.md

Get alerted when CVE-2025-5495 or the next vulnerability affects your stack