CVE-2025-67159

HighCVSS 7.5

Published: 02/01/2026(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

In Vatilon version 1.12.37-20240124, user credentials were found to be transmitted in plaintext. This means that passwords and logins can be intercepted by an attacker during network transmission.

Risk Assessment

The risk involves potential interception of login credentials by third parties, which could lead to unauthorized system access and theft of sensitive data.

Recommendation

Immediately update Vatilon to the latest version that encrypts credential transmission. Until then, apply additional network-level encryption (e.g., VPN).

Other vulnerabilities in Vatilon

CVE-2025-67160High
A directory traversal vulnerability was found in Vatilon version 1.12.37-20240124. It allows an attacker to access sensitive directories and files outside the intended scope.

Original NVD description (English source)

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.