PT-2026-25080 · Undefined · Undefined

Published 2026-03-12 · Updated 2026-03-13 · CVE-2026-25819

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HMS Networks Ewon Flexy versions prior to 15.0s4 HMS Networks Cosy+ versions 22.xx prior to 22.1s6 HMS Networks Cosy+ versions 23.xx prior to 23.0s3

Description The software allows unauthenticated attackers to cause a Denial of Service. This is achieved by sending a specially crafted HTTP request that results in a device reboot, requiring access to the device’s GUI.

Recommendations Update HMS Networks Ewon Flexy to version 15.0s4 or later. Update HMS Networks Cosy+ to version 22.1s6 or later. Update HMS Networks Cosy+ to version 23.0s3 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-25819

Affected Products

Undefined

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-25819 · Security Note
• https://twitter.com/infoflowcloud/status/2032411789749633418 · Twitter Post
• https://twitter.com/CVEnew/status/2032410984082768225 · Twitter Post
• https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2026-03-09-001---ewon-several-flexy-and-cosy--vulnerabilities.pdf?sfvrsn=f7c027b8_13 · Note
• https://hms-networks.com/p/flexy20500-00ma-ewon-flexy-205 · Note