Is CVE-2025-65128 actively exploited?

No active exploitation of CVE-2025-65128 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-65128 be exploited remotely?

Partially. CVE-2025-65128 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-65128?

CVE-2025-65128 has a CVSS score of 8.1 (HIGH) and an EPSS exploitation probability of 0.01%.

HOME VULNERABILITIESCVE-2025-65128

HIGH

CVE-2025-65128

CWE-287Published: February 11, 2026· Updated: Feb 17, 2026

8.1

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.7th

Official Description

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local network to modify router and network configurations. By invoking operations whose names end with "*_nocommit" and supplying the parameters expected by the invoked function, an attacker can change configuration data, including SSID, Wi-Fi credentials, and administrative passwords, without authentication or an existing session.

NVD Source

Technical Analysis

CVE-2025-65128 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 8.1.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.