Authentication Bypass Vulnerability in TLogger Web Server by TBEA
CVE-2025-15681

9.2CRITICAL

Key Information:

Vendor

Tbea

Status
Tbea Tlogger (tbea Communication Box 3rd Generation)
Vendor
CVE Published:
10 August 2026

What is CVE-2025-15681?

The TBEA TLogger version 2.1.0.0B0.0.0.0 exhibits a significant security flaw allowing an authenticated user to be bypassed. An attacker, without proper authentication, can exploit the vulnerability via the /index.asp endpoint to access restricted features intended for authenticated users. This may lead to unauthorized exposure or modification of sensitive configuration data. Additionally, improper logout procedures following the unauthorized access may result in the application crashing, thereby further compromising the system.

Affected Version(s)

TBEA TLogger (TBEA Communication Box 3rd Generation) 0

References

https://en.tbea.com/about.html

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

S. Eisenreich-Dietz (CyberDanube)
T. Weber (CyberDanube)
F. Koroknai
D. Blagojevic
.