CVE-2025-6560

CVE-2025-6560 is a critical Exposure of Sensitive Information vulnerability affecting multiple end-of-life Sapido wireless router models. Unauthenticated remote attackers can directly access a system configuration file to obtain plaintext administrator credentials. This vulnerability has a CVSS score of 9.8 (CRITICAL), indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable. However, the vulnerability has garnered significant community discussion, suggesting awareness and potential future exploitation.