How to fix CVE-2025-10174?

Within 24 hours: Inventory all PanCafe Pro installations and identify systems running versions below 3.3.2; notify affected business units of the risk. Within 7 days: Implement network segmentation to isolate PanCafe Pro systems; enable enhanced logging and monitoring for suspicious traffic patterns; contact vendor for patch availability timeline. Within 30 days: Develop and execute migration plan to upgrade to version 3.3.2 or later once patch is released; conduct security assessment post-upgrade.

CVE-2025-10174

HIGH

2026-02-11 [email protected]

Information Disclosure

8.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 11, 2026 - 12:16 nvd

HIGH 8.3

DescriptionNVD

Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pro allows Flooding.This issue affects PanCafe Pro: from < 3.3.2 through 23092025.

AnalysisAI

Technical ContextAI

Classified as CWE-319 (Cleartext Transmission of Sensitive Information). Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pro allows Flooding.This issue affects PanCafe Pro: from < 3.3.2 through 23092025.

Affected ProductsAI

Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-10174 vulnerability details – vuln.today

Back