Skip to content
OpenAdvisories
Critical · 9.4 CVE-2025-54816 EUVD-2026-4500GHSA-fpfh-v96r-h7v9

EVMAPA Missing Authentication for Critical Function

Published Jan 22, 2026 · Updated Jan 23, 2026 · Assigned by icscert

Description

This vulnerability occurs when a WebSocket endpoint does not enforce
proper authentication mechanisms, allowing unauthorized users to
establish connections. As a result, attackers can exploit this weakness
to gain unauthorized access to sensitive data or perform unauthorized
actions. Given that no authentication is required, this can lead to
privilege escalation and potentially compromise the security of the
entire system.

Affected products

VendorProductAffectedFixed
EVMAPA EVMAPA All versions —

Advisories 1

References