---
id: 6148
title: "CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting ~70,000+ Hosts"
cve: CVE-2025-54322
cvss: 9.8
severity: critical
source_domain: pwn.ai
source_url: "https://pwn.ai/blog/cve-2025-54322-zeroday-unauthenticated-root-rce-affecting-70-000-hosts"
published_at: "2025-12-26T16:25:42Z"
tags: ["ai-security", "rce", "zero-day", "autonomous-agents", "pre-auth-rce", "cve-2025-54322", "edge-devices", "vendor-disclosure"]
phying_url: "https://phying.com/item/6148"
lang: en
---

# CVE-2025-54322 (ZERODAY) - Unauthenticated Root RCE affecting ~70,000+ Hosts

## Summary

pwn.ai's agent-found zero-day: CVE-2025-54322 yields unauthenticated root RCE on Xspeeder SXZOS edge devices, tens of thousands exposed, disclosed after seven months of vendor silence.

## Intelligence Metadata

- **Sources:** pwn.ai
- **CVE:** CVE-2025-54322
- **CVSS:** 9.8
- **Published:** 2025-12-26T16:25:42Z
- **Original:** https://pwn.ai/blog/cve-2025-54322-zeroday-unauthenticated-root-rce-affecting-70-000-hosts
- **Phying News:** https://phying.com/item/6148