CVE-2025-26409

Summary

CVE-2025-26409 is a vulnerability affecting Wattsense Bridge devices. The issue allows an attacker with physical access to the PCB to access a serial interface, granting them entry to the bootloader and ultimately a root shell on the device. This vulnerability poses a significant risk as it can be exploited even without network access. It is recommended that users update their firmware to the latest version, BSP >= 6.4.1, to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.