PT-2025-36967 · Sophos · Sophos Ap6 Series Wireless Access Points

Published 2025-09-09 · Updated 2025-10-16 · CVE-2025-10159

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Sophos AP6 Series Wireless Access Points versions prior to 1.7.2563

Description: An authentication bypass allows remote attackers to gain administrative privileges.

Recommendations: Update to version 1.7.2563 or later.

Fix

Weakness Enumeration

CWE-620

Related Identifiers

BDU:2025-11500

CVE-2025-10159

Affected Products

Sophos Ap6 Series Wireless Access Points

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-10159 · Security Note
• https://bdu.fstec.ru/vul/2025-11500 · Security Note
• https://twitter.com/the_yellow_fall/status/1965614216276312383 · Twitter Post
• https://community.sophos.com/sophoswireless/b/blog/posts/sophos-ap6-series-wireless-update-maintenance-release-mr-7-version-1-7-2563 · Note
• https://sophos.com/en-us/security-advisories/sophos-sa-20250909-ap6 · Note
• https://twitter.com/CVEnew/status/1965557704010735836 · Twitter Post
• https://twitter.com/CCBalert/status/1965765809927487946 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1965534989275029895 · Twitter Post
• https://twitter.com/autumn_good_35/status/1965823513723547757 · Twitter Post
• https://twitter.com/fridaysecurity/status/1965614925466009900 · Twitter Post
• https://zeropath.com/blog/cve-2025-10159-sophos-ap6-authentication-bypass · Note
• https://twitter.com/Komodosec/status/1978947879931908162 · Twitter Post
• https://twitter.com/CyberWolfGuard/status/1965787667607749074 · Twitter Post