What’s Vulnerable › Vulnerabilities

CVE-2025-54603

• Severity: critical (CVSS 9.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-14 · updated 2026-09-08
• Weakness: CWE-284

Description

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

References

• https://claroty.com
• https://claroty.com/product-security/oidc-configurations-in-claroty-secure-access

Get alerted when CVE-2025-54603 or the next vulnerability affects your stack