CVE-2025-64778

High · 7.8

CVSS

7.8

EPSS

0.1%

Published

Dec 2, 2025

CISA due date

—

The record

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.

Affected packages

Ecosystem	Package	Introduced	Fixed