What’s Vulnerable › Vulnerabilities

CVE-2025-40653: User enumeration in M3M Printer Server Web

• Severity: medium (CVSS 6.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-26 · updated 2026-06-17
• Weakness: CWE-209

Description

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames.

Affected products

• M3M Printer Server Web: all versions

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/user-enumeration-m3m-printer-server-web

Get alerted when CVE-2025-40653 or the next vulnerability affects your stack