CVE-2025-11190

CVE-2025-11190 PUBLISHED

Description (CNA)

The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.

Affected (CNA)

Vendor / product	Versions
Synchroweb / Kiwire	affected 3.6

CWE

No CWE identifiers supplied.

References

https://www.synchroweb.com/release-notes/kiwire/security

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/887923