What’s Vulnerable › Vulnerabilities

CVE-2025-12868: CyberTutor｜New Site Server - Use of Client-Side Authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-10 · updated 2026-10-18
• Weakness: CWE-603

Description

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.

Affected products

• CyberTutor New Site Server: 0

References

• https://www.twcert.org.tw/en/cp-139-10492-84a10-2.html
• https://www.twcert.org.tw/tw/cp-132-10493-bf807-1.html

Get alerted when CVE-2025-12868 or the next vulnerability affects your stack