HIGH🇵🇱 Wersja polska

CVE-2025-56224

CVSS 8.1v3.1pub. 2025-10-20upd. 2026-07-05

A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ascertia Signinghub

    APP
    Ascertia
    ≤ 8.6.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-54321CRITICAL9.8PL ✓ten sam produkt

Brak rate limiting w funkcji resetowania hasła w Ascertia SigningHub

CVE-2025-56221CRITICAL9.8PL ✓ten sam produkt

Brak rate limiting w SigningHub umożliwia atak brute force na logowanie

CVE-2025-56218CRITICAL9.8PL ✓ten sam produkt

Dowolne przesyłanie plików w SigningHub umożliwia RCE

CVE-2025-56219HIGH7.1ten sam produkt

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any ra...

CVE-2025-56223HIGH7.5ten sam produkt

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to c...