What’s Vulnerable › Vulnerabilities

CVE-2025-53118: Securden Unified PAM Authentication Bypass

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 35.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-25 · updated 2026-06-17
• Weakness: CWE-306

Description

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.

Affected products

• Securden Unified PAM: from 9.0.* through 11.3.1

References

• https://www.rapid7.com/blog/post/securden-unified-pam-multiple-critical-vulnerabilities-fixed/

Get alerted when CVE-2025-53118 or the next vulnerability affects your stack