CVE-2025-67446

Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before

Critical · published June 4, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value (e.g., setting it to "admin"), an attacker can bypass the authentication schema and gain unauthorized access to admin functionalities.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Published
2026-06-04T00:00Z
EPSS history
Timeline
  • 04 JUN 00:00Z
    Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before
    cvelistv5