CVE-2025-15112 | Ksenia Lares 4.0 Home Automation 1.6 Trusted Domain cmdOk.xml redirectPage (ZSL-2025-5928)

December 31, 2025 Yanac

A vulnerability marked as problematic has been reported in Ksenia Lares 4.0 Home Automation 1.6. Affected by this vulnerability is an unknown functionality of the file cmdOk.xml of the component Trusted Domain Handler. The manipulation of the argument redirectPage leads to open redirect.

This vulnerability is traded as CVE-2025-15112. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More