CVSS 3.1
7.1 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NCVE-2025-48862
High (7.1). EPSS 0.1% chance of exploitation in the next 30 days.
Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-311, CWE-1104
- Published
- Modified
- Record from
- the NVD, synced