CVEvulnerability
CVE-2025-52689
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2025-07-16
- Last modified
- 2026-06-17
- Assigner
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
- CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-384
Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
Related
Weakness · CWE (1)
- CWE-384 Session Fixation weakness
References
- https://blog.uhg.sg/article/24.html blog.uhg.sg
- https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf www.al-enterprise.com
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ www.csa.gov.sg
- https://github.com/UltimateHG/CVE-2025-52689-PoC github.com