PT-2026-20926 · Ruckus · Ruckus Network Director

Published 2026-02-19 · Updated 2026-02-24 · CVE-2025-67305

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RUCKUS Network Director versions prior to 4.5.0.56

Description RUCKUS Network Director (RND) OVA appliances include hardcoded SSH keys for the postgres user. These keys are consistent across all deployments. An attacker with network access can use these keys to authenticate via SSH without a password. Successful authentication grants access to the PostgreSQL database with superuser privileges, enabling the creation of administrative users for the web interface and potential privilege escalation.

Recommendations Update RUCKUS Network Director to version 4.5.0.56 or later.

Exploit

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-67305

Affected Products

Ruckus Network Director

References · 5

• 🔥 https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-012-ruckus-nd-hardcoded-ssh-keys-rce.md · Exploit
• https://webresources.commscope.com/download/assets/RUCKUS+Network+Director%3A+Critical+Security+Bypass+Vulnerability+Leading+to+Remote+Code+Execution+and/3adeb3acb69211f08a46b6532db37357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67305 · Security Note
• https://t.me/CVEtracker/45174 · Telegram Post
• https://twitter.com/CVEnew/status/2026265067944096145 · Twitter Post