CVE-2025-71457 vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php
CriticalCVSS 9.3
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers knowing a valid user_name can send action=change_password to RecoverPwd::displayChangePwd() and log in as administrators lacking two-factor authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vtenext | >= 25.02, < 25.02.1 | 25.02.1 |
References
- blog.sicuranext.com exploit third-party-advisory
- 0xbro.red technical-description
- usermanual.vtenext.com release-notes
- VulnCheck Advisory: vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php third-party-advisory