Critical · 9.1 CVE-2025-26201 EUVD-2025-4288GHSA-m893-pwcq-437v

Credential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote unauthenticated attackers to bypass authen…

Published Feb 24, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

Credential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges.

References

https://github.com/Elymaro/CVE/blob/main/GreaterWMS/CVE-2025-26201.md
https://github.com/GreaterWMS/GreaterWMS/issues/383