CVE-2025-11155 — The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request h — CVE Database · The Intelligence Room