CVE-2025-11084CWE-1390

CVE-2025-11084

published November 11, 2025

CVSS
7.6
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.

The record
Technical detail
CVSS
7.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.6th percentile
Weakness
CWE-1390 · Weak Authentication
Published
2025-11-11T19:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 13:26Z
    FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass
    cvelistv5