https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-11190.htmlhttps://patchthecve.com/cve/CVE-2025-11190.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 5.4: The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.https://patchthecve.com/cve/CVE-2025-11189.htmlhttps://patchthecve.com/cve/CVE-2025-11189.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.https://patchthecve.com/cve/CVE-2025-11188.htmlhttps://patchthecve.com/cve/CVE-2025-11188.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database.