CVE-2025-63214

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Nov 19, 2025

CISA due date

—

The record

An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.

Affected packages

Ecosystem	Package	Introduced	Fixed