CVE-2025-26004

Summary

CVE-2025-26004 is a newly identified vulnerability affecting the Telesquare TLR-2005KSH 1.1.4 device. This issue permits unauthorized stack buffer overflow due to a flaw in the admin.cgi parameter handling, specifically when a user requests the setDdns feature. An attacker can exploit this vulnerability to execute arbitrary code and potentially gain administrative access to the targeted system. Successful exploitation could result in significant data loss or system compromise. Users are advised to apply the necessary patches provided by the vendor to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.