What’s Vulnerable › Vulnerabilities

CVE-2025-52689: Weak Session ID Check in the OmniAccess Stellar Web Management Interface

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-16 · updated 2026-06-17
• Weakness: CWE-384

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

Affected products

• Alcatel-Lucent OmniAccess Stellar Products: through AP1100 AWOS versions 5.0.2 GA; through AP1200 AWOS versions 5.0.2 GA; through AP1300 AWOS versions 5.0.2 GA; through AP1400 AWOS versions 5.0.2 GA; through AP1500 AWOS versions 5.0.2 GA

References

• https://blog.uhg.sg/article/24.html
• https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf
• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/
• https://github.com/UltimateHG/CVE-2025-52689-PoC

Get alerted when CVE-2025-52689 or the next vulnerability affects your stack