CVE-2025-52689

Critical CVSS: 9.8

Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

Vendor

Product

CWE

CWE-384

Yayın Tarihi

2025-07-16 07:15:23

Güncelleme

2025-07-16 15:15:32

Source Identifier

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

KEV Date Added

Kategoriler

CWE-384 CRITICAL 2025

Referanslar

https://blog.uhg.sg/article/24.html https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ https://github.com/UltimateHG/CVE-2025-52689-PoC