CVE-2025-10452CWE-306

Gotac|Statistical Database System - Missing Authentication

Critical · published September 15, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

🚨 Unauthenticated attackers can waltz right into your database! This critical Missing Authentication vulnerability in Gotac's Statistical Database System allows them to read, modify, and even delete your precious data! 🔥 Think of it like leaving the front door to your digital vault wide open, with a sign that says 'All are welcome!' Anyone can stroll in and start rearranging your valuable inventory without a care in the world. This vulnerability could lead to absolutely devastating consequences—your sensitive data could be compromised, altered, or erased entirely. Imagine waking up to find that all your critical information is either missing or tampered with, affecting your business operations and reputation!

Put simply

Think of it like leaving the front door to your digital vault wide open, with a sign that says 'All are welcome!' Anyone can stroll in and start rearranging your valuable inventory without a care in the world. The flaw exists due to a lack of authentication checks, allowing remote attackers to access the database with high-level privileges without needing to log in. This means they can perform any actions as if they were an authorized user.

What to do

This vulnerability could lead to absolutely devastating consequences—your sensitive data could be compromised, altered, or erased entirely. Imagine waking up to find that all your critical information is either missing or tampered with, affecting your business operations and reputation! Immediate action is crucial! Patch your Statistical Database System to the latest version provided by Gotac, enabling robust authentication methods to secure access. Review your configurations to ensure that only authorized users can interact with the database. You’ve got this! Follow these steps and you’ll lock down your database in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00643 · 50.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-09-15T02:47Z
EPSS history
Timeline
  • 15 SEP 02:47Z
    Gotac|Statistical Database System - Missing Authentication
    cvelistv5