CVE-2025-13483

SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application.

CVSS 4.0

8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-25)

CWE

CWE-306

Published

2025-11-25

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-06

Check your stackJSON