CVE-2025-60534

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate…

Critical · published January 6, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

🚨 An authentication bypass in Blue Access Cobalt lets attackers slip through the front door like they own the place! 🔥 Think of a fancy restaurant where anyone can walk in and sit at the VIP table without a reservation. That’s what this vulnerability allows — unauthorized access to sensitive application features, as if the bouncer has lost his guest list! This vulnerability is absolutely devastating! An attacker could manipulate requests to perform actions as if they were a legitimate user, leading to unauthorized data access, changes, or even complete control over the application. It opens the floodgates to mischief and data breaches, and with the severity it carries, this should not be taken lightly!

Put simply

Think of a fancy restaurant where anyone can walk in and sit at the VIP table without a reservation. That’s what this vulnerability allows — unauthorized access to sensitive application features, as if the bouncer has lost his guest list! The vulnerability allows an attacker to proxy requests to the web application, bypassing the need for legitimate authentication, effectively giving them unauthorized access to functionalities that should be protected.

What to do

This vulnerability is absolutely devastating! An attacker could manipulate requests to perform actions as if they were a legitimate user, leading to unauthorized data access, changes, or even complete control over the application. It opens the floodgates to mischief and data breaches, and with the severity it carries, this should not be taken lightly! Immediate action is crucial! Ensure you update Blue Access Cobalt to the latest version that addresses this flaw. Additionally, review your authentication mechanisms to ensure there are no other weaknesses that could be exploited. Regular security audits can help maintain your defenses. You've got this! With prompt action, you can secure your application and keep the bad guys out! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00667 · 51.3th percentile
Published
2026-01-06T00:00Z
EPSS history
Timeline
  • 06 JAN 00:00Z
    Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate…
    cvelistv5