CVE-2025-15111

CRITICAL 9.8CVE-2025-15111 · Published 30/12/2025 · updated 17/06/2026

In short

CVE-2025-15111 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 47.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Ksenia Security lares (legacy model) version 1.6 contains a default credentials vulnerability that allows unauthorized attackers to gain administrative access. Attackers can exploit the weak default administrative credentials to obtain full control of the home automation system.

References

packetstorm.news/files/id/190180 · Third Party Advisory
kseniasecurity.com · Product
vulncheck.com/advisories/ksenia-security-lares-home-automation-default-credentials-vulnerability · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2025-5927.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free