⤷ Title: Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 00:11:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Theft #Critical Vulnerability #CVE_2025_61481 #http #MikroTik #RouterOS #SwitchOS #WebFig
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 00:11:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Theft #Critical Vulnerability #CVE_2025_61481 #http #MikroTik #RouterOS #SwitchOS #WebFig
Daily CyberSecurity
Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig
A Critical (CVSS 10.0) flaw (CVE-2025-61481) in MikroTik RouterOS/SwOS exposes the WebFig management interface over unencrypted HTTP by default, allowing remote credential theft via MitM.