CVE-2025-54338
High · 7.5CVSS
7.5
EPSS
0.3%
Published
Nov 24, 2025
CISA due date
—
The record
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|