KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation. If any user is logged in, endpoints such as /cgi-bin/system-tool accept unauthenticated requests with empty or invalid session values. This design flaw lets attackers piggyback on another user's active session to retrieve sensitive configuration data or execute privileged actions without authentication.
CVE-2025-68717
CVSS base score
9.4 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-287
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
kaysus ks-wr3600 firmware
References
- github.com Third Party Advisory
- github.com Exploit
- www.kaysus.com Product