CVE-2025-9994: Amped Rf Bt-Ap 111

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing unauthorized access to anyone with network access.

Affected products

• Amped Rf Bt-Ap 111: any version

Published 2025-09-09. Last modified 2026-09-26.