Is CVE-2025-15568 actively exploited?

No active exploitation of CVE-2025-15568 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-15568 be exploited remotely?

Partially. CVE-2025-15568 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-15568?

CVE-2025-15568 has a CVSS score of 8.5 (HIGH).

HOME VULNERABILITIESCVE-2025-15568

HIGH

CVE-2025-15568

CWE-78Published: March 9, 2026· Updated: Mar 11, 2026

8.5

CVSS v3.1

EPSS:0.13%probability of exploitation in 30 daysPercentile:32.2th

Official Description

A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution (RCE) when the router is configured with sysmode=ap. Successful exploitation results in root-level privileges and impacts confidentiality, integrity and availability of the device.

This issue affects Archer AXE75 v1.6/v1.0: through 1.3.2 Build 20250107.

NVD Source

Technical Analysis

CVE-2025-15568 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X