PT-2025-31966 · Blue Access · Blue Access Cobalt X1

Snakemacready · Published 2025-08-05 · Updated 2025-08-06 · CVE-2025-50454

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Blue Access Cobalt X1 versions through 02.000.187

Description An authentication bypass exists in Blue Access' Cobalt X1, potentially allowing an unauthorized attacker to log into the application as an administrator without valid credentials.

Recommendations Update Blue Access Cobalt X1 to a version beyond 02.000.187.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-50454

Affected Products

Blue Access Cobalt X1

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-50454 · Security Note
• https://blueaccesstech.com/collections/software/products/cobalt-x1-software · Note
• https://twitter.com/VulmonFeeds/status/1952891645684334908 · Twitter Post
• https://twitter.com/CVEnew/status/1952798177364414562 · Twitter Post
• https://t.me/CVEtracker/29223 · Telegram Post
• https://snakemacready.github.io/cve/2025/08/01/CVE-2025-50454.html · Note