CVE-2025-54816
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
CWE-306
Ausencia de autenticación para una función crítica
Fecha de publicación:
22/01/2026
Última modificación:
22/01/2026
Descripción
*** Pendiente de traducción *** This vulnerability occurs when a WebSocket endpoint does not enforce <br />
proper authentication mechanisms, allowing unauthorized users to <br />
establish connections. As a result, attackers can exploit this weakness <br />
to gain unauthorized access to sensitive data or perform unauthorized <br />
actions. Given that no authentication is required, this can lead to <br />
privilege escalation and potentially compromise the security of the <br />
entire system.
Impacto
Puntuación base 3.x
9.40
Gravedad 3.x
CRÍTICA