What’s Vulnerable › Vulnerabilities

CVE-2025-59453

• Severity: low (CVSS 3.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-16 · updated 2026-09-30
• Weakness: CWE-669

Description

Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency access. By using a crafted URL while on the Emergency Access web page, an unauthorized person can gain access to the Passwordstate Administration section.

Affected products

• Click Studios Passwordstate: before 9.9 Build 9972 — fixed in 9.9 Build 9972

How to fix

Upgrade to a fixed version: Click Studios Passwordstate 9.9 Build 9972. Check the vendor advisory for mitigations.

References

• https://www.clickstudios.com.au/passwordstate-changelog.aspx
• https://www.clickstudios.com.au/security/advisories/

Get alerted when CVE-2025-59453 or the next vulnerability affects your stack