CVE-2025-57434

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation

High · published September 22, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Published
2025-09-22T00:00Z
EPSS history
Timeline
  • 22 SEP 00:00Z
    Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation
    cvelistv5