PT-2026-24257 · Deutsche Telekom · Telekom Account Management Portal

Published 2026-03-10 · Updated 2026-05-07 · CVE-2025-69615

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Deutsche Telekom AG Telekom Account Management Portal versions prior to 2025-11-03

Description An issue exists with access control due to a lack of rate-limiting for two-factor authentication (2FA), enabling unlimited brute-force attempts and a complete bypass of multi-factor authentication without any user interaction.

Recommendations Update to version 2025-11-03 or later.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-69615

Affected Products

Telekom Account Management Portal

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-69615 · Security Note
• https://telekom.com/en/company/data-privacy-and-security/news/acknowledgements-358300#R · Note
• https://twitter.com/infoflowcloud/status/2034521912580182058 · Twitter Post
• https://twitter.com/CveFindCom/status/2031440314087395593 · Twitter Post
• https://twitter.com/CVEnew/status/2034520459119640678 · Twitter Post
• https://gist.github.com/ethicalrohitt/b3e6d071aac8530459e8b3a5720bb832 · Note
• https://t.me/cveNotify/162632 · Telegram Post