VULNERABILITY INTELLIGENCE

CVE-2019-25278

CVSS score9.1 CRITICAL

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-01-08

Last modified2026-06-17

Description

FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.