CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear

CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear reports that a swarm of autonomous AI agents identified a pre-authentication remote code execution flaw in SXZOS core firmware used by Xspeeder SD-WAN devices, a vulnerability described as unpatched and dangerous.

The flaw allows an attacker to run arbitrary system commands without logging in, by manipulating specific HTTP headers in the device’s Nginx middleware, including a User-Agent of SXZ/2.3 and a time-based X-SXZ-R header, the article explains. According to pwn[.]ai, the discovery marks a leap in capability for automated agents, which emulated firmware, mapped the attack surface and produced a working entry point without human hand-holding.

The report notes that Xspeeder has not responded to disclosure attempts for more than seven months, leaving the zero-day unresolved and widely deployed in remote industrial and branch environments. Security researchers urge isolating affected SXZOS-based systems from the public internet until a patch is released, given tens of thousands of exposed devices identified by fingerprinting services.