CVE-2025-59108

9.2 criticalEPSS 0.4%

Critical (9.2). EPSS 0.4% chance of exploitation in the next 30 days.

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced.

Severity

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-1392
Published: 2026-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19