CVE-2025-54816 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to establish connections. A…
Critical CVSS: 9.4

CVE-2025-54816

This vulnerability occurs when a WebSocket endpoint does not enforce
proper authentication mechanisms, allowing unauthorized users to
establish connections. As a result, attackers can exploit this weakness
to gain unauthorized access to sensitive data or perform unauthorized
actions. Given that no authentication is required, this can lead to
privilege escalation and potentially compromise the security of the
entire system.
Vendor
Evmapa
Product
Evmapa
CWE
CWE-306
Yayın Tarihi
2026-01-22 23:15:49
Güncelleme
2026-02-02 19:56:13
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-

Kategoriler

Referanslar