CVE-2025-54816
EVMAPA Missing Authentication for Critical Function
- State
- Published
- Severity
- 9.4 Critical
- Published
- Jan 22, 2026
- Updated
- Jan 23, 2026
- Reserved
- Aug 20, 2025
Description
This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to establish connections. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.4 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
EVMAPAEVMAPA |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.