CVE-2025-57434

8.8 highEPSS 0.5%

High (8.8) in creacast creabox manager. EPSS 0.5% chance of exploitation in the next 30 days.

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-798
Published: 2025-09-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

creacast:creabox_manager

References

http://www.creacast.com/
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57434

Check your stack JSON