PT-2026-1919 · Kaysus · Kaysus Ks-Wr3600

Published 2026-01-08 · Updated 2026-02-02 · CVE-2025-68717

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR3600 router version 1.0.5.9.1

Description KAYSUS KS-WR3600 routers with firmware version 1.0.5.9.1 have a flaw where authentication can be bypassed during session validation. When a user is logged in, certain API endpoints, such as /cgi-bin/system-tool, accept requests without valid session information. This allows an attacker to leverage an existing user's session to access sensitive configuration data or perform actions with elevated privileges without proper authentication. The vulnerable parameter is the session value.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /cgi-bin/system-tool endpoint to authorized users only.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-68717

Affected Products

Kaysus Ks-Wr3600

References · 10

• 🔥 https://github.com/actuator/cve/blob/main/KAYSUS/CVE-2025-68717.txt · Exploit
• 🔥 https://github.com/actuator/cve/tree/main/KAYSUS · Exploit
• https://osv.dev/vulnerability/CVE-2025-68717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68717 · Security Note
• https://twitter.com/TheHackerWire/status/2009384615879037123 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2009436656277819620 · Twitter Post
• https://kaysus.com/ks_wr3600__wifi_7_be3600_wireless_router.html · Note
• https://t.me/CVEtracker/41770 · Telegram Post
• https://twitter.com/CVEnew/status/2009462380787581249 · Twitter Post
• https://t.me/cveNotify/150602 · Telegram Post