Authentication Bypass Vulnerability in vtenext by SicuraNext
CVE-2025-71457

9.3CRITICAL

Key Information:

Vendor

Vtenext

Status
Vtenext
Vendor
CVE Published:
4 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-71457?

The vtenext application version 25.02 prior to 25.02.1 is susceptible to an authentication bypass vulnerability. This flaw enables unauthenticated attackers to modify any user's password through the endpoint hub/rpwd.php without prior token verification. By exploiting this weakness, attackers with knowledge of a valid username can initiate a password change via the RecoverPwd::displayChangePwd() function, potentially gaining administrative access if two-factor authentication measures are not enforced.

Affected Version(s)

vtenext 25.02 < 25.02.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-71457 - Proof of Concept

References

https://blog.sicuranext.com/vtenext-25-02-a-three-way-pat...
third-party-advisoryexploit
https://0xbro.red/posts/vtenext-25-02-a-three-way-path-to...
technical-description
https://usermanual.vtenext.com/books/release-notes-histor...
release-notes

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mattia "0xbro" Brollo
.