CVE-2025-53118criticalobserved exploitationCWE-306

CVE-2025-53118: critical vulnerability in Securden Unified PAM

Securden Unified PAM Authentication Bypass

Published

Follow this CVE+ Monitor Unified PAM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

77Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 35%
from disclosure to weapon
Published on NVDAug 25
VulnCheck+77d
An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Securden · Unified PAM
Related CVEs — Securden Unified PAM

In the same product, most dangerous first.

CVE-2025-53119HIGHSecurden Unified PAM Unauthenticated Unrestricted File UploadEPSS 15.0%CVE-2025-53120CRITICALSecurden Unified PAM Path Traversal In File UploadEPSS 11.7%CVE-2025-6737HIGHSecurden Unified PAM Shared SSH Key and Cloud InfrastructureEPSS 0.3%