VULNERABILITY INTELLIGENCE

CVE-2025-67418

CVSS score9.8 CRITICAL
EPSS probability0.51%
CISA KEVNot currently listed
Published2025-12-22
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative control of the application.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-798

Primary references