Brute Force Vulnerability in Raytha CMS
CVE-2025-69246

6.9MEDIUM

Key Information:

Vendor

Raytha

Status
Raytha
Vendor
CVE Published:
16 March 2026

What is CVE-2025-69246?

The Raytha CMS lacks a protective mechanism against brute force attacks, enabling potential attackers to execute automated login attempts without encountering lockouts, throttling, or additional challenges. This vulnerability highlights the necessity for robust authentication safeguards to prevent unauthorized access. Users are advised to upgrade to version 1.4.6 or later, where this issue has been effectively addressed.

Affected Version(s)

Raytha 0 < 1.4.6

References

https://cert.pl/en/posts/2026/03/CVE-2025-69236
third-party-advisory
https://raytha.com
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Basta
.