CVE-2025-9994

CriticalCVSS 9.8/10Last modified Sep 26, 2026

Description

The Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing unauthorized access to anyone with network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2025
Last modified
Sep 26, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-99965.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause theCVE-2025-99975.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause comCVE-2025-99986.0The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send speCVE-2025-99997.6Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving stati
CVE-2025-9994: Critical severity, CVSS 9.8 | Vulnix