VULNERABILITY INTELLIGENCE
CVE-2025-53118
CVSS score9.8 CRITICAL
EPSS probability35.11%
CISA KEVNot currently listed
Published2025-08-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.
Weakness classification
- cve@rapid7.com: CWE-306