CVE-2025-44957: Commscope Ruckus Network Director

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

Affected products

• Commscope Ruckus Network Director: before 4.5.0.51 (fixed in 4.5.0.51)
• Commscope Ruckus Smartzone Firmware: before 6.1.2 (fixed in 6.1.2); version 6.1.2 only; version 7.0.0 only; version 7.1.0 only

Published 2025-08-04. Last modified 2026-06-17.