PT-2026-28804 · Eset · Eset Protect

Published 2026-03-30 · Updated 2026-03-30 · CVE-2025-3716

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ESET Protect (on-prem) (affected versions not specified)

Description The software is susceptible to user enumeration through response timing. This allows an attacker to determine valid usernames within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2025-3716

Affected Products

Eset Protect

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-3716 · Security Note
• https://twitter.com/CVEnew/status/2038618091270111578 · Twitter Post
• https://help.eset.com/changelogs/?product=protect&lang=en-US · Note