CVE-2025-15005
Low · 3.7CVSS
3.7
EPSS
0.5%
Published
Dec 22, 2025
CISA due date
—
The record
A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.example.php of the component reCAPTCHA Handler. The manipulation of the argument K_RECAPTCHA_SITE_KEY/K_RECAPTCHA_SECRET_KEY results in use of hard-coded cryptographic key . It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-11505 A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000… CWE-320
- CVE-2026-8739 A vulnerability was detected in Sanluan PublicCMS 5.202506.d. CWE-320
- CVE-2026-8243 A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. CWE-320
- CVE-2026-7306 A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. CWE-320
- CVE-2026-7018 A vulnerability was determined in Datavane Datavines up to… CWE-320
- CVE-2026-6611 A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. CWE-320
- CVE-2026-6580 A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. CWE-320
- CVE-2026-5622 A vulnerability was determined in hcengineering Huly Platform 0.7.382. CWE-320