CVE-2025-67418
CRITICAL
INFO
Priority: 0.05
BB Relevance:
80/100
Published: 2025-12-22
Modified: 2026-11-04
First seen: 2026-11-04
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative control of the application.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| oxygenz | clipbucket | 5.3 – 5.5.2 |
References & Advisories (1)
Exploit
Mitigation
Third Party Advisory