by Kastro
Paper/Archive/CVE-2025-53118

CVE-2025-53118

Securden Unified PAM — Securden Unified PAM Authentication Bypass

EPSS 35%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.4.984 × 2019.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.

Affected

ProductAffectedFixed inSource
Unified PAM9.0.* – 11.3.1–CNA

Scores by source

rapid7 (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

writeuprapid7.com/blog/post/securden-unified-pam-multiple-critical-vulnerabilities-fixed