Skip to content
OpenAdvisories

Product · mersive

Solstice Pod API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66573

    Solstice Pod API Session Key Extraction via API Endpoint

    Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information…

    mersive Solstice Pod API