CVE-2024-57055

5.0 mediumEPSS 0.3%

Medium (5.0). EPSS 0.3% chance of exploitation in the next 30 days.

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client (not the general-use JSON services) and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit.

Severity

CVSS 3.1

5.0 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.wombatdialer.com/blog/blog/2025/02/18/CVE/

Check your stack JSON