Kerlink vulnerabilities
We track 2 vulnerabilities in Kerlink products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 1, 2025.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Kerlink vulnerabilities
- 8.1 High severity
Keros: Improper Control of Generation of Code
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via
- 7.4 High severity
Keros: Cleartext Transmission of Sensitive Information
Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the d