CVE-2025-58741CWE-522

Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture

High · published January 20, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

⚡ A poorly guarded credential vault is letting attackers peek inside! This vulnerability in Milner ImageDirector Capture can expose sensitive database access credentials, making it a high-stakes game! 🔥 Think of it like a restaurant that left its recipe book wide open on the counter. Any curious chef could just walk in and copy down all the secret ingredients, leading to a delicious business disaster! An attacker could easily retrieve sensitive credential material, leading to unauthorized access to your database. This could result in data leaks, malicious data manipulation, or even full control over your system. Protecting your data is essential, and this vulnerability poses a serious risk!

Put simply

Think of it like a restaurant that left its recipe book wide open on the counter. Any curious chef could just walk in and copy down all the secret ingredients, leading to a delicious business disaster! The insufficiently protected credentials in the Credential Field of Milner ImageDirector Capture allow unauthorized users to access sensitive database credentials, compromising the security of the entire system.

What to do

An attacker could easily retrieve sensitive credential material, leading to unauthorized access to your database. This could result in data leaks, malicious data manipulation, or even full control over your system. Protecting your data is essential, and this vulnerability poses a serious risk! Immediately patch to the latest version beyond 7.6.3.25808 to secure your credentials. Additionally, review and strengthen credential storage practices to ensure that all sensitive information is well-protected. Regularly audit your systems for similar vulnerabilities! You've got this! By taking these steps, you’ll be one step closer to securing your systems! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-01-20T21:36Z
EPSS history
Timeline
  • 20 JAN 21:36Z
    Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture
    cvelistv5