Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+ Hosts

Cybersecuritynews •Abinaya • December 30, 2025

A critical zero-day vulnerability has been discovered in XSpeeder’s SXZOS firmware, affecting tens of thousands of SD-WAN appliances, edge routers, and smart TV controllers deployed globally. The vulnerability, designated PWN-25-01, enables unauthenticated remote code execution (RCE) with root-level privileges through a single HTTP GET request. XSpeeder, a Chinese networking vendor specializing in edge infrastructure, manufactures […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical 0-Day RCE Flaw in Networking Devices Exposes 70,000 Hosts A critical remote code execution vulnerability, tracked as CVE-2025-54322, has been identified in networking devices, allowing attackers to gain complete control over affected systems without authentication. Over 70,000 hosts are at risk due to this flaw, which has raised significant security concerns in the cybersecurity community. 4 sources 94

Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+ Hosts

The full story

Extracted Entities

Attack Types (1)

Vulnerabilities (1)