PT-2026-25698 · Raytha+1 · Raytha

Daniel Basta · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2025-69246

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS lacks brute force protection, enabling attackers to submit numerous automated login attempts without triggering account lockout or other protective measures. This allows for potential unauthorized access to accounts.

Recommendations Update to version 1.4.6 or later.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2025-69246

Produtos afetados

Raytha

Referências · 7

• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Nota
• https://raytha.com · Nota
• https://osv.dev/vulnerability/CVE-2025-69246 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-69246 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2033530094094864608 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033583650797981803 · Publicação no Twitter
• https://twitter.com/fernandokarl/status/2033585185371947060 · Publicação no Twitter