CVE-2025-48469

Severe 9.6

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.

Published June 24, 2025.