PT-2026-1835 · Unknown · Microserver

Published 2026-01-07 · Updated 2026-01-22 · CVE-2025-61939

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MicroServer (affected versions not specified)

Description An unused function in MicroServer can initiate a reverse SSH connection to a vendor-registered domain without mutual authentication. An attacker with local network access and administrative privileges to the web server, along with the ability to manipulate DNS responses, can redirect this SSH connection to a device under their control. This allows for unauthorized SSH connections to vendor domains, potentially exposing security risks on local networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-923

Related Identifiers

CVE-2025-61939

Affected Products

Microserver

References · 9

• https://osv.dev/vulnerability/CVE-2025-61939 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61939 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-006-01.json · Note
• https://t.me/cveNotify/149586 · Telegram Post
• https://t.me/CVEtracker/41637 · Telegram Post
• https://twitter.com/TheHackerWire/status/2009019126191472758 · Twitter Post
• https://twitter.com/CVEnew/status/2009020531987894760 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-006-01 · Note
• https://twitter.com/CveFindCom/status/2009017064145530993 · Twitter Post