Skip to content Dark Web Informer - Cyber Threat Intelligence

CVE-2025-26201: Authentication Bypass via Credential Disclosure

🚨 Critical Security Vulnerability
🆔 CVE-2025-26201
💣 CVSS Score: 9.1
📅 Published Date: 2025-02-24

⚠️ Details: Credential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges.

🛠 References:
🔗 GitHub 1: https://github.com/GreaterWMS/GreaterWMS/issues/383
🔗 GitHub 2: https://github.com/Elymaro/CVE/blob/main/GreaterWMS/CVE-2025-26201.md

Latest