What is the CVSS score of CVE-2025-68882?

CVE-2025-68882 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Scalenut Scalenut are affected by CVE-2025-68882?

A missing authorization vulnerability in Scalenut versions up to 1.1.3 allows attackers to bypass access controls and potentially access sensitive data or perform unauthorized actions.

How to fix or mitigate CVE-2025-68882?

Within 24 hours: Identify all Scalenut instances and document their version numbers and deployment scope. Within 7 days: Implement network segmentation to restrict Scalenut access to trusted users only, enable detailed audit logging on all Scalenut API calls, and contact Scalenut support for patch availability and timeline. Within 30 days: Evaluate alternative solutions, establish a patch deployment plan, or consider disabling non-critical Scalenut features until a patch is released.

Scalenut Scalenut CVE-2025-68882

HIGH

Missing Authorization (CWE-862)

2026-01-22 audit@patchstack.com

Authentication Bypass

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:43 vuln.today

cvss_changed

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 7.5

DescriptionCVE.org

Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scalenut: from n/a through <= 1.1.3.

AnalysisAI

Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scalenut: from n/a through <= 1.1.3. [CVSS 7.5 HIGH]

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Scalenut Scalenut scalenut. Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scalenut: from n/a through <= 1.1.3.