CVE-2025-66573

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

CVSS 4.0

6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-25)

CWE

CWE-319

Published

2025-12-04

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• mersive:solstice_pod_firmware

References

• https://documentation.mersive.com/en/solstice/about-solstice.html
• https://www.exploit-db.com/exploits/52104
• https://www.mersive.com/
• https://www.vulncheck.com/advisories/solstice-pod-api-session-key-extraction-via-api-endpoint
• https://www.exploit-db.com/exploits/52104

Check your stackJSON