Description
RevPi Webstatus存在 认证绕过漏洞,未经授权的远程攻击者可以通过误用不正确的类型转换来绕过受影响软件包的身份验证。
RevPi Webstatus 认证绕过漏洞(CVE-2025-41646)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-41646
https://www.cve.org/CVERecord?id=CVE-2025-41646
https://cve.imfht.com/detail/CVE-2025-41646
https://www.ddpoc.com/DVB-2025-9585.html
https://www.kunbus.com/en/productsecurity/Kunbus-2025-0000003
https://fortiguard.fortinet.com/threat-signal-report/6196
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-0518.html
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41646.yaml
https://revolutionpi.com/en/support/security-advisories
https://www.sentinelone.com/vulnerability-database/cve-2025-41646/