CVE-2025-54343

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for…

Critical · published November 14, 2025

CVSS v3.1
9.6
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

🚨 A sneaky access control flaw could let remote attackers elevate their privileges like a surprise VIP access pass! 🔥 This vulnerability is like a hotel receptionist accidentally giving a guest the keys to the penthouse suite without verifying their identity — suddenly, they can access restricted areas meant only for the elite. 🎟️ An attacker could exploit this oversight to gain unauthorized access to sensitive resources, potentially leading to full system compromise, data theft, or manipulation. The implications are absolutely devastating for security and data integrity!

Put simply

This vulnerability is like a hotel receptionist accidentally giving a guest the keys to the penthouse suite without verifying their identity — suddenly, they can access restricted areas meant only for the elite. 🎟️ This Incorrect Access Control vulnerability in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2 allows remote users to escalate their privileges without proper authentication checks.

What to do

An attacker could exploit this oversight to gain unauthorized access to sensitive resources, potentially leading to full system compromise, data theft, or manipulation. The implications are absolutely devastating for security and data integrity! Patch immediately to version 6.1.1.3 or later to close this gap. Review access control configurations and audit user permissions to ensure that only authorized personnel have access to sensitive functionalities. 🚀 You've got this! Follow these steps, and you'll have your system locked down tighter than a vault! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Published
2025-11-14T00:00Z
EPSS history
Timeline
  • 14 NOV 00:00Z
    An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for…
    cvelistv5