CVE-2025-27568

Impact

An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04