Cloudanix VulnDB

CVE-2025-56332

Critical · 9.1

CVSS

9.1

EPSS

0.4%

Published

Dec 30, 2025

CISA due date

—

The record

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

Affected packages

Ecosystem Package Introduced Fixed