CVE-2025-4526 (GCVE-0-2025-4526)
Vulnerability from cvelistv5 – Published: 2025-05-11 01:00 – Updated: 2026-05-27 14:33
VLAI
Title
Dígitro NGC Explorer Configuration missing password field masking
Summary
A vulnerability was identified in Dígitro NGC Explorer up to 3.44.15/3.48.21. The affected element is an unknown function of the component Configuration Page. Such manipulation leads to missing password field masking. It is possible to launch the attack remotely. Upgrading to version 3.48.22 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/308271 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/308271/cti | signaturepermissions-required |
| https://vuldb.com/submit/565307 | third-party-advisory |
| https://digitro.com/recomendacao-10-2026-ctir-gov/ | patch |
| https://www.gov.br/ctir/pt-br/assuntos/alertas-e-… | related |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Dígitro | NGC Explorer |
Affected:
3.44.0
Affected: 3.44.1 Affected: 3.44.2 Affected: 3.44.3 Affected: 3.44.4 Affected: 3.44.5 Affected: 3.44.6 Affected: 3.44.7 Affected: 3.44.8 Affected: 3.44.9 Affected: 3.44.10 Affected: 3.44.11 Affected: 3.44.12 Affected: 3.44.13 Affected: 3.44.14 Affected: 3.44.15 Affected: 3.48.0 Affected: 3.48.1 Affected: 3.48.2 Affected: 3.48.3 Affected: 3.48.4 Affected: 3.48.5 Affected: 3.48.6 Affected: 3.48.7 Affected: 3.48.8 Affected: 3.48.9 Affected: 3.48.10 Affected: 3.48.11 Affected: 3.48.12 Affected: 3.48.13 Affected: 3.48.14 Affected: 3.48.15 Affected: 3.48.16 Affected: 3.48.17 Affected: 3.48.18 Affected: 3.48.19 Affected: 3.48.20 Affected: 3.48.21 Unaffected: 3.48.22 cpe:2.3:a:d_gitro:ngc_explorer:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4526",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-12T14:38:09.297067Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-12T14:38:15.234Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:d_gitro:ngc_explorer:*:*:*:*:*:*:*:*"
],
"modules": [
"Configuration Page"
],
"product": "NGC Explorer",
"vendor": "D\u00edgitro",
"versions": [
{
"status": "affected",
"version": "3.44.0"
},
{
"status": "affected",
"version": "3.44.1"
},
{
"status": "affected",
"version": "3.44.2"
},
{
"status": "affected",
"version": "3.44.3"
},
{
"status": "affected",
"version": "3.44.4"
},
{
"status": "affected",
"version": "3.44.5"
},
{
"status": "affected",
"version": "3.44.6"
},
{
"status": "affected",
"version": "3.44.7"
},
{
"status": "affected",
"version": "3.44.8"
},
{
"status": "affected",
"version": "3.44.9"
},
{
"status": "affected",
"version": "3.44.10"
},
{
"status": "affected",
"version": "3.44.11"
},
{
"status": "affected",
"version": "3.44.12"
},
{
"status": "affected",
"version": "3.44.13"
},
{
"status": "affected",
"version": "3.44.14"
},
{
"status": "affected",
"version": "3.44.15"
},
{
"status": "affected",
"version": "3.48.0"
},
{
"status": "affected",
"version": "3.48.1"
},
{
"status": "affected",
"version": "3.48.2"
},
{
"status": "affected",
"version": "3.48.3"
},
{
"status": "affected",
"version": "3.48.4"
},
{
"status": "affected",
"version": "3.48.5"
},
{
"status": "affected",
"version": "3.48.6"
},
{
"status": "affected",
"version": "3.48.7"
},
{
"status": "affected",
"version": "3.48.8"
},
{
"status": "affected",
"version": "3.48.9"
},
{
"status": "affected",
"version": "3.48.10"
},
{
"status": "affected",
"version": "3.48.11"
},
{
"status": "affected",
"version": "3.48.12"
},
{
"status": "affected",
"version": "3.48.13"
},
{
"status": "affected",
"version": "3.48.14"
},
{
"status": "affected",
"version": "3.48.15"
},
{
"status": "affected",
"version": "3.48.16"
},
{
"status": "affected",
"version": "3.48.17"
},
{
"status": "affected",
"version": "3.48.18"
},
{
"status": "affected",
"version": "3.48.19"
},
{
"status": "affected",
"version": "3.48.20"
},
{
"status": "affected",
"version": "3.48.21"
},
{
"status": "unaffected",
"version": "3.48.22"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "j369 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in D\u00edgitro NGC Explorer up to 3.44.15/3.48.21. The affected element is an unknown function of the component Configuration Page. Such manipulation leads to missing password field masking. It is possible to launch the attack remotely. Upgrading to version 3.48.22 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-549",
"description": "Missing Password Field Masking",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-27T14:33:37.053Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-308271 | D\u00edgitro NGC Explorer Configuration missing password field masking",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/308271"
},
{
"name": "VDB-308271 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/308271/cti"
},
{
"name": "Submit #565307 | D\u00edgitro NGC Explorer 3.44.15 Plaintext Password in Configuration File",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/565307"
},
{
"tags": [
"patch"
],
"url": "https://digitro.com/recomendacao-10-2026-ctir-gov/"
},
{
"tags": [
"related"
],
"url": "https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-05-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-05-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-27T16:38:20.000Z",
"value": "VulDB entry last update"
}
],
"title": "D\u00edgitro NGC Explorer Configuration missing password field masking"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-4526",
"datePublished": "2025-05-11T01:00:06.924Z",
"dateReserved": "2025-05-10T05:29:51.012Z",
"dateUpdated": "2026-05-27T14:33:37.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-4526",
"date": "2026-05-27",
"epss": "0.00106",
"percentile": "0.28247"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-4526\",\"sourceIdentifier\":\"cna@vuldb.com\",\"published\":\"2025-05-11T01:15:52.000\",\"lastModified\":\"2026-05-27T15:16:24.160\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability was identified in D\u00edgitro NGC Explorer up to 3.44.15/3.48.21. The affected element is an unknown function of the component Configuration Page. Such manipulation leads to missing password field masking. It is possible to launch the attack remotely. Upgrading to version 3.48.22 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 una vulnerabilidad clasificada como problem\u00e1tica en D\u00edgitro NGC Explorer 3.44.15. Esta afecta a una parte desconocida de la p\u00e1gina de configuraci\u00f3n del componente. La manipulaci\u00f3n provoca la omisi\u00f3n del enmascaramiento del campo de contrase\u00f1a. Es posible iniciar el ataque puede ejecutarse en remoto. Se contact\u00f3 al proveedor con antelaci\u00f3n para informarle sobre esta vulnerabilidad, pero no respondi\u00f3.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":2.1,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"PROOF_OF_CONCEPT\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"cna@vuldb.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"},{\"lang\":\"en\",\"value\":\"CWE-549\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:digitro:ngc_explorer:3.44.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E62990A8-47F0-4E03-9119-1980C3AB230E\"}]}]}],\"references\":[{\"url\":\"https://digitro.com/recomendacao-10-2026-ctir-gov/\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/submit/565307\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/vuln/308271\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://vuldb.com/vuln/308271/cti\",\"source\":\"cna@vuldb.com\"},{\"url\":\"https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026\",\"source\":\"cna@vuldb.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-4526\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-12T14:38:09.297067Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-12T14:38:12.240Z\"}}], \"cna\": {\"title\": \"D\\u00edgitro NGC Explorer Configuration missing password field masking\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"j369 (VulDB User)\"}, {\"lang\": \"en\", \"type\": \"coordinator\", \"value\": \"VulDB CNA Team\"}], \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P\"}}, {\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C\"}}, {\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C\"}}, {\"cvssV2_0\": {\"version\": \"2.0\", \"baseScore\": 4, \"vectorString\": \"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:d_gitro:ngc_explorer:*:*:*:*:*:*:*:*\"], \"vendor\": \"D\\u00edgitro\", \"modules\": [\"Configuration Page\"], \"product\": \"NGC Explorer\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.44.0\"}, {\"status\": \"affected\", \"version\": \"3.44.1\"}, {\"status\": \"affected\", \"version\": \"3.44.2\"}, {\"status\": \"affected\", \"version\": \"3.44.3\"}, {\"status\": \"affected\", \"version\": \"3.44.4\"}, {\"status\": \"affected\", \"version\": \"3.44.5\"}, {\"status\": \"affected\", \"version\": \"3.44.6\"}, {\"status\": \"affected\", \"version\": \"3.44.7\"}, {\"status\": \"affected\", \"version\": \"3.44.8\"}, {\"status\": \"affected\", \"version\": \"3.44.9\"}, {\"status\": \"affected\", \"version\": \"3.44.10\"}, {\"status\": \"affected\", \"version\": \"3.44.11\"}, {\"status\": \"affected\", \"version\": \"3.44.12\"}, {\"status\": \"affected\", \"version\": \"3.44.13\"}, {\"status\": \"affected\", \"version\": \"3.44.14\"}, {\"status\": \"affected\", \"version\": \"3.44.15\"}, {\"status\": \"affected\", \"version\": \"3.48.0\"}, {\"status\": \"affected\", \"version\": \"3.48.1\"}, {\"status\": \"affected\", \"version\": \"3.48.2\"}, {\"status\": \"affected\", \"version\": \"3.48.3\"}, {\"status\": \"affected\", \"version\": \"3.48.4\"}, {\"status\": \"affected\", \"version\": \"3.48.5\"}, {\"status\": \"affected\", \"version\": \"3.48.6\"}, {\"status\": \"affected\", \"version\": \"3.48.7\"}, {\"status\": \"affected\", \"version\": \"3.48.8\"}, {\"status\": \"affected\", \"version\": \"3.48.9\"}, {\"status\": \"affected\", \"version\": \"3.48.10\"}, {\"status\": \"affected\", \"version\": \"3.48.11\"}, {\"status\": \"affected\", \"version\": \"3.48.12\"}, {\"status\": \"affected\", \"version\": \"3.48.13\"}, {\"status\": \"affected\", \"version\": \"3.48.14\"}, {\"status\": \"affected\", \"version\": \"3.48.15\"}, {\"status\": \"affected\", \"version\": \"3.48.16\"}, {\"status\": \"affected\", \"version\": \"3.48.17\"}, {\"status\": \"affected\", \"version\": \"3.48.18\"}, {\"status\": \"affected\", \"version\": \"3.48.19\"}, {\"status\": \"affected\", \"version\": \"3.48.20\"}, {\"status\": \"affected\", \"version\": \"3.48.21\"}, {\"status\": \"unaffected\", \"version\": \"3.48.22\"}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-05-10T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2025-05-10T02:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2026-05-27T16:38:20.000Z\", \"value\": \"VulDB entry last update\"}], \"references\": [{\"url\": \"https://vuldb.com/vuln/308271\", \"name\": \"VDB-308271 | D\\u00edgitro NGC Explorer Configuration missing password field masking\", \"tags\": [\"vdb-entry\", \"technical-description\"]}, {\"url\": \"https://vuldb.com/vuln/308271/cti\", \"name\": \"VDB-308271 | CTI Indicators (IOB, IOC, TTP)\", \"tags\": [\"signature\", \"permissions-required\"]}, {\"url\": \"https://vuldb.com/submit/565307\", \"name\": \"Submit #565307 | D\\u00edgitro NGC Explorer 3.44.15 Plaintext Password in Configuration File\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://digitro.com/recomendacao-10-2026-ctir-gov/\", \"tags\": [\"patch\"]}, {\"url\": \"https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026\", \"tags\": [\"related\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability was identified in D\\u00edgitro NGC Explorer up to 3.44.15/3.48.21. The affected element is an unknown function of the component Configuration Page. Such manipulation leads to missing password field masking. It is possible to launch the attack remotely. Upgrading to version 3.48.22 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-549\", \"description\": \"Missing Password Field Masking\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"Information Disclosure\"}]}], \"providerMetadata\": {\"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\", \"dateUpdated\": \"2026-05-27T14:33:37.053Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-4526\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-27T14:33:37.053Z\", \"dateReserved\": \"2025-05-10T05:29:51.012Z\", \"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"datePublished\": \"2025-05-11T01:00:06.924Z\", \"assignerShortName\": \"VulDB\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…