Stored XSS Vulnerability in Neterbit NW-431F Router
CVE-2025-67448

7.1HIGH

Key Information:

Vendor

Neterbit

Status
Neterbit NW-431F Router
Vendor
CVE Published:
4 June 2026

What is CVE-2025-67448?

The SMS module in Neterbit NW-431F Router versions 20241014-IR03 and earlier is susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw arises from the inadequate sanitization of user input within SMS messages prior to their storage and subsequent display. As a result, an attacker could exploit this vulnerability by sending an SMS containing a malicious payload. Once the victim views the message, the payload is executed within their browser, potentially compromising their security and privacy.

References

https://neterbit.com/
https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67448

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.