CVE-2025-50740

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability. The AutoConnect web interface /_ac/config allows HTML/JS code to be executed via a crafted network SSID.

Published 2025-08-06. Last modified 2026-06-17.