Brute Force Vulnerability in SigningHub Product by Ascertia
CVE-2025-56224

8.1HIGH

Key Information:

Vendor

Ascertia

Status
SigningHub
Vendor
CVE Published:
20 October 2025

What is CVE-2025-56224?

The One-Time Password (OTP) verification endpoint in SigningHub v8.6.8 is vulnerable to brute force attacks due to insufficient rate limiting. This weakness allows attackers to bypass the OTP verification process, potentially compromising accounts and sensitive information. Implementing proper rate limiting is crucial to secure this endpoint against unauthorized access and protect user authentication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://ascertia.com
http://signinghub.com
https://github.com/saykino/CVE-2025-56224

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.