PT-2026-5989 · Eladmin+1 · Eladmin

Published 2026-02-04 · Updated 2026-02-04 · CVE-2025-70997

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions eladmin versions prior to 2.8

Description An issue exists that allows an arbitrary user password reset regardless of the user permission level.

Recommendations Update to a version later than 2.7.

Exploit

Fix

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-863

CWE-284

Related Identifiers

CVE-2025-70997

Affected Products

Eladmin

References · 4

• 🔥 https://github.com/fofo137/CVE/issues/1 · Exploit
• https://osv.dev/vulnerability/CVE-2025-70997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70997 · Security Note
• https://github.com/elunez/eladmin · Note