CVE-2025-56008 is a cross-site scripting (CWE-79) vulnerability affecting KeeneticOS before version 4.3 on the "Wireless ISP" page. An attacker located near the affected router can exploit this XSS flaw to inject malicious scripts, which enables them to add new users with full permissions to the device, effectively taking control of it. The vulnerability has a CVSS 3.1 base score of 6.1, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity.

Successful exploitation allows an attacker physically near the router to add users with full permissions, leading to potential device takeover. This compromises device integrity and confidentiality but does not impact availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to the device and avoid interacting with the "Wireless ISP" page from untrusted environments. Monitor vendor communications for updates on patches or mitigations.