CVE-2025-41711

—

CVSS 3.1

5.3 medium

EPSS

<1%p24

Published

Mar 10, 2026 (Mar 10, 2026)

Modified

Jun 17, 2026

Description

An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.

Weakness: CWE-327
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.