Kiwire vulnerabilities

2 known vulnerabilities in Kiwire from Synchroweb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Kiwire: Improper Neutralization of Input During Web Page Generation

  CVE-2025-11189Oct 10, 2025Synchroweb

  The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

• 7.3 High severity

  Kiwire: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-11188Oct 10, 2025Synchroweb

  The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.