CVE-2025-26411

Summary

CVE-2025-26411 is a vulnerability affecting the Plugin Manager of Wattsense Bridge devices' web interface. Authenticated attackers can exploit this flaw by uploading malicious Python files, thereby gaining remote root access to the device. A valid user account on the Wattsense web interface is required for an attacker to carry out this exploit. This issue has been resolved in recent firmware versions BSP 6.1.0 and above.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.