PT-2026-1461 · Unknown · Blue Access Cobalt

Published 2026-01-06 · Updated 2026-01-29 · CVE-2025-60534

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Blue Access Cobalt version 02.000.195

Description The software is susceptible to an authentication bypass. This allows an attacker to selectively proxy requests to operate functionality on the web application without valid credentials. The issue allows bypassing the normal authentication process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-60534

Affected Products

Blue Access Cobalt

References · 8

• 🔥 https://github.com/PilotPatrickk/Published-CVEs/blob/main/CVE-2025-60534.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60534 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60534 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2008676282662265088 · Twitter Post
• https://t.me/cveNotify/150227 · Telegram Post
• http://blue.com · Note
• https://twitter.com/CVEnew/status/2008583123588534676 · Twitter Post
• https://twitter.com/TheHackerWire/status/2008639270366351826 · Twitter Post