CVEvulnerability

CVE-2025-60534

9.8 CRITICAL Published 2026-01-06 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2026-01-06
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate functionality on the web application without the need to authenticate with legitimate credentials.

Affected configurations

• blueaccesstech cobalt x1 02.000.195

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References