CVE-2025-63314

CRITICAL
2026-01-12 [email protected]
10.0
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 12, 2026 - 17:15 nvd
CRITICAL 10.0

Tags

Authentication Bypass Session Fixation Cm3 Acora Cms

Description

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.

Analysis

Acora CMS v10.7.1 uses a static, predictable password reset token. Attackers can replay this token to reset any user's password and take over their account, including admin accounts. Maximum CVSS 10.0 with scope change.

Technical Context

The password reset function uses a fixed token (CWE-640) instead of generating unique, time-limited tokens per request. Any attacker who discovers or guesses this static token can reset any user's password indefinitely.

Affected Products

DDSN Interactive Acora CMS v10.7.1

Remediation

Implement cryptographically random, single-use, time-limited password reset tokens.

Priority Score

50
Low Medium High Critical
KEV: 0
EPSS: +0.1
CVSS: +50
POC: 0

Share

CVE-2025-63314 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy