CVE-2025-25053: Inaba Denki Sangyo Co., Ltd Ac-Pd-WPS-11ac

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.

Affected products

• Inaba Denki Sangyo Co., Ltd Ac-Pd-WPS-11ac: up to and including v2.0.03P
• Inaba Denki Sangyo Co., Ltd Ac-Pd-WPS-11ac-P: up to and including v2.0.03P
• Inaba Denki Sangyo Co., Ltd Ac-WPS-11ac: up to and including v2.0.03P
• Inaba Denki Sangyo Co., Ltd Ac-WPS-11ac-P: up to and including v2.0.03P
• Inaba Denki Sangyo Co., Ltd Ac-Wpsm-11ac: up to and including v2.0.03P
• Inaba Denki Sangyo Co., Ltd Ac-Wpsm-11ac-P: up to and including v2.0.03P

Published 2025-04-09. Last modified 2026-06-17.