CVE-2025-10546: Ppc Technologies Ppc Xpon Ont Optical Network Terminal 2k15x

Medium severity, CVSS 5.1. EPSS: 0.5% chance of exploitation in the next 30 days.

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected Cross-Site Scripting (XSS) attack on the targeted system.

Affected products

• Ppc Technologies Ppc Xpon Ont Optical Network Terminal 2k15x: version v2.3.15PPCL only; version v1.0.3 only

Published 2025-09-16. Last modified 2026-06-17.