VULNERABILITY INTELLIGENCE

CVE-2025-46826

CVSS score1.3 LOW

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-05-07

Last modified2026-06-17

Description

insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025.