PT-2026-25698 · Raytha+1 · Raytha

Daniel Basta · CVE-2025-69246 · Published 2026-03-16 · Updated 2026-03-16

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS lacks brute force protection, enabling attackers to submit numerous automated login attempts without triggering account lockout or other protective measures. This allows for potential unauthorized access to accounts.

Recommendations Update to version 1.4.6 or later.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-69246

Affected Products

Raytha

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69246.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-69246 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69246 · Vendor Advisory
• https://github.com/raythahq/raytha · Note
• https://twitter.com/cyberbivash/status/2033530094094864608 · Twitter Post
• https://twitter.com/CVEnew/status/2033583650797981803 · Twitter Post
• https://raytha.com · Note
• https://twitter.com/fernandokarl/status/2033585185371947060 · Twitter Post
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Note