Description
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OPEXUS | FOIAXpress Public Access Link (PAL) | 11.1.0 – < 11.12.3.0 | 11.12.3.0 |
Advisories 1
- VA-25-174-01 OPEXUS FOIAXpress Public Access Link (PAL) multiple vulnerabilities CISA ICS & IT advisories · Sep 9, 2025