CVE-2025-41719

A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known default password.

More information : https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json