CVE-2025-12866: Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-10 · updated 2026-10-18
Weakness: CWE-640

Description

EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password.

Affected products

Hundred Plus EIP Plus: before RELEASE_240626 — fixed in RELEASE_240626

How to fix

Upgrade to a fixed version: Hundred Plus EIP Plus RELEASE_240626. Check the vendor advisory for mitigations.

References

https://www.twcert.org.tw/en/cp-139-10491-004b0-2.html
https://www.twcert.org.tw/tw/cp-132-10490-2534b-1.html
https://www.chtsecurity.com/news/20848f61-9db5-44fd-8574-c9d6a54e4010

Get alerted when CVE-2025-12866 or the next vulnerability affects your stack