Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-10127 EUVD-2025-28991GHSA-fv4f-72j5-c8mx

Daikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten Password

Published Sep 11, 2025 · Updated Sep 24, 2025 · Assigned by icscert

Description

Daikin Europe N.V

Security Gateway is vulnerable to an authorization bypass through
a user-controlled key vulnerability that could allow an attacker to
bypass authentication. An unauthorized attacker could access the system
without prior credentials.

Affected products

VendorProductAffectedFixed
Daikin Europe N.V Security Gateway App: 100, Frm: 214 —

Advisories 1

References