CVE-2025-10174CWE-319

Improper Access Control in Pan Software's PanCafe Pro

High · published February 11, 2026

CVSS v3.1
8.3
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

⚡ Sensitive data is traveling in plain sight! The Cleartext Transmission of Sensitive Information vulnerability in PanCafe Pro can allow attackers to intercept and flood your sensitive data – like a leaky faucet spilling secrets everywhere. 🚰 Think of it as a busy café where every customer’s order is shouted out loud without a whisper. Anyone within earshot can hear your personal information as it floats through the air. That's the risk here! An attacker could tap into the network traffic and capture sensitive user data, leading to a potential data breach or exploitation of personal information. This could result in financial loss, reputational damage, or unauthorized access to user accounts – a nightmare scenario for any business! 🔥

Put simply

Think of it as a busy café where every customer’s order is shouted out loud without a whisper. Anyone within earshot can hear your personal information as it floats through the air. That's the risk here! This vulnerability allows unencrypted transmission of sensitive information, making it accessible to anyone monitoring the network traffic. It affects versions prior to 3.3.2 and the one dated 23092025, potentially leaving users exposed.

What to do

An attacker could tap into the network traffic and capture sensitive user data, leading to a potential data breach or exploitation of personal information. This could result in financial loss, reputational damage, or unauthorized access to user accounts – a nightmare scenario for any business! 🔥 Upgrade to version 3.3.2 or later to secure data transmission. Implement encryption protocols like TLS to protect sensitive information during transmission and regularly audit your network for exposure. 🛡️ You've got this! Take these steps and secure your data like a pro! 🌟

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-02-11T11:52Z
EPSS history
Timeline
  • 11 FEB 11:52Z
    Improper Access Control in Pan Software's PanCafe Pro
    cvelistv5