CVE-2025-56333
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Dec 29, 2025
CISA due date
—
The record
An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|