CVE-2025-62586CWE-306

CVE-2025-62586

Critical · published October 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

🚨 An attacker can reset the administrator password without even breaking a sweat! This vulnerability in OPEXUS FOIAXpress is a wake-up call you shouldn't ignore! ⚡ Think of it like a diner where anyone can walk in and scribble a new order for the chef without showing ID — chaos ensues in the kitchen! If exploited, an attacker could waltz right in and take absolute control, resetting the admin password and compromising the entire system. This could lead to unauthorized access to sensitive information, putting your organization at risk!

Put simply

Think of it like a diner where anyone can walk in and scribble a new order for the chef without showing ID — chaos ensues in the kitchen! This vulnerability allows unauthenticated remote attackers to reset the administrator password, making it dangerously easy for them to take over the FOIAXpress system.

What to do

If exploited, an attacker could waltz right in and take absolute control, resetting the admin password and compromising the entire system. This could lead to unauthorized access to sensitive information, putting your organization at risk! Patch immediately to version 11.13.2.0 to close this loophole. It's also wise to review access controls and monitor for any unusual activity. Don't wait for trouble to find you! You've got this! Follow these steps, and you'll have your system secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-10-16T22:15Z
Affected products (1)
ProductVersionsFixed in
opexustech/foiaxpress≥ 11.1.0, < 11.13.2.011.13.2.0
References (3)
EPSS history
Timeline
  • 16 OCT 17:20Z
    OPEXUS FOIAXpress unauthenticated administrator password reset
    cvelistv5