VULNERABILITY INTELLIGENCE

CVE-2025-60534

CVSS score9.8 CRITICAL
EPSS probability0.67%
CISA KEVNot currently listed
Published2026-01-06
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate functionality on the web application without the need to authenticate with legitimate credentials.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Primary references