VULNERABILITY INTELLIGENCE

CVE-2025-15552

CVSS score7.8 HIGH

EPSS probability0.11%

CISA KEVNot currently listed

Published2026-03-16

Last modified2026-06-17

Description

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.