CVE-2025-48860 | BDVDB-2026-289741 Detail

Description#

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to access sensitive data.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-08-14Record published in the CVE List.
2. Version 22026-02-26Most recent update recorded in the CVE List.