CVE-2025-52361

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 allows a locally authenticated low-privilege user to execute arbitrary commands with root privilege via editing this script which is executed with root-privileges on any interaction and on every system boot.

Published 2025-08-01. Last modified 2026-06-17.