CVE Daily

CVE-2025-44963

RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT...

Critical CVSS 9.0

Overview

RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.

CWE: CWE-321 Published: 2025-08-04T17:15:30.540
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.0 (CRITICAL)
  • Detected tags: jwt (tag impact: LOW)

Recommended actions:

  • Use strong algorithms (HS256/RS256), rotate secrets, short expiries.

Recommended tools

Tags