CVE-2025-26008

Summary

CVE-2025-26008 is a newly identified vulnerability affecting the Telesquare TLR-2005KSH 1.1.4 system. This issue involves an unauthorized stack overflow, which can be triggered by sending a specific request to the admin.cgi parameter with the setSyncTimeHost setting. Successful exploitation of this vulnerability could result in a denial-of-service condition or potentially allow an attacker to execute arbitrary code and gain administrative access to the affected device. It is strongly recommended that users of this device apply the necessary patches or upgrades as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.