CVE-2025-5597: WF Steuerungstechnik GmbH - airleader MASTER - Authentication Bypass

Severity: critical (CVSS 10.0 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-04 · updated 2026-06-17
Weakness: CWE-287

Description

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571.

Affected products

WF Steuerungstechnik GmbH airleader MASTER: 3.00571

References

https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-003_wf-seuerungstechnik-gmbh_airleader-master_authentication-bypass.md

Get alerted when CVE-2025-5597 or the next vulnerability affects your stack