← Database

CVE-2025-11190

MEDIUM CVSS: 5.4 Published: 2025-10-10 Modified: 2026-06-17

Description

The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.

Affected Platforms

Synchroweb Kiwire

Weakness Type

CWE-59

References