What’s Vulnerable › Vulnerabilities

CVE-2025-60534

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-06 · updated 2026-07-05
• Weakness: CWE-287

Description

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate functionality on the web application without the need to authenticate with legitimate credentials.

Affected products

• Blueaccesstech Cobalt X1: 02.000.195

References

• https://github.com/PilotPatrickk/Published-CVEs/blob/main/CVE-2025-60534.md

Get alerted when CVE-2025-60534 or the next vulnerability affects your stack