VULNERABILITY INTELLIGENCE

CVE-2025-69908

CVSS score7.5 HIGH

EPSS probability0.41%

CISA KEVNot currently listed

Published2026-01-23

Last modified2026-06-17

Description

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource.