CVE-2025-11284High· 7.3▾ TwilightA vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of hard-coded password. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11666Medium· 6.7A flaw has been found in Tenda RP3 Pro up to 22.5.7.93
CVE-2025-6139Low· 3.9A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207
CVE-2026-97877High· 7.3A vulnerability was determined in zhistaredu StarTraining up to 3.8.1
CVE-2025-13221Medium· 5.3A weakness has been identified in Intelbras UnniTI 24.07.11
CVE-2025-13187Medium· 5.3A security vulnerability has been detected in Intelbras ICIP 2.0.20
CVE-2025-14183Medium· 4.3A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915