AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-61481

CRITICAL · CVSS 10 EPSS 0.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-10-27 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 10.0. It affects Java.

CVE
CVE-2025-61481
Severity
CRITICAL
CVSS
10
EPSS
0.29%
Java

Original NVD Description

An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials.