Skip to content
OpenAdvisories
Critical VA-25-289-01 1 CVE

OPEXUS FOIAXpress unauthenticated administrator password reset

Published Oct 16, 2025 · Updated Oct 16, 2025

Vendor: OPEXUS Product: FOIAXpress

Summary

OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password and gain full administrative access to a vulnerable system.

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-62586

    OPEXUS FOIAXpress unauthenticated administrator password reset

    OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password. Fixed in FOIAXpress version 11.13.2.0.

    OPEXUS FOIAXpress

Revision history

  1. #1.0.0

    Initial publication