PT-2025-47157 · Qatraq · Qatraq

Published 2025-11-17 · Updated 2025-11-26 · CVE-2025-63747

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QaTraq version 6.9.2

Description QaTraq version 6.9.2 is shipped with default administrative account credentials enabled, allowing immediate login via the web application login page. An attacker reaching the login page can gain administrative access due to the account’s default administrative privileges.

Recommendations Change the default administrative account credentials immediately.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2025-63747

Affected Products

Qatraq

References · 7

• 🔥 https://bitsbyamg.com/blog/post/2025/10/19/qatraq-692-default-creds-and-file-upload-rce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63747 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63747 · Vendor Advisory
• http://qatraq.com · Note
• https://t.me/CVEtracker/37500 · Telegram Post
• https://t.me/cveNotify/144106 · Telegram Post
• https://twitter.com/CVEnew/status/1990462689777181143 · Twitter Post