CVE-2025-22906 | RE11S 1.11 /goform/setWAN L2TPUserName command injection

A vulnerability was found in RE11S 1.11 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/setWAN. The manipulation of the argument L2TPUserName leads to command injection.

This vulnerability is handled as CVE-2025-22906. The attack needs to be initiated within the local network. There is no exploit available.