What is the CVSS score of EUVD-2025-20092?

EUVD-2025-20092 has a CVSS 3.1 base score of 9.4 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.2%.

Which versions of PHP are affected by EUVD-2025-20092?

NetAlertX versions prior to 25.6.7 contain a critical authentication bypass vulnerability that allows attackers to gain unauthorized access to the network scanning and alerting system without valid…. A patch is available.

Is there a public PoC exploit available for EUVD-2025-20092?

Yes, a public proof-of-concept exploit is available for EUVD-2025-20092. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate EUVD-2025-20092?

Within 24 hours: Identify all instances of NetAlertX and document current versions in use. Within 7 days: Upgrade all NetAlertX deployments to version 25.6.7 or later per vendor advisory. Within 30 days: Conduct access logs review for the past 90 days to identify any suspicious authentication patterns or unauthorized access attempts, and reset credentials for all administrative accounts as a precautionary measure.

PHP EUVD-2025-20092

| CVE-2025-48952 CRITICAL

Incorrect Comparison (CWE-697)

2025-07-04 security-advisories@github.com

PHP Authentication Bypass Netalertx

9.4

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.4 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 05:52 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

25.6.7

EUVD ID Assigned

Mar 16, 2026 - 02:42 euvd

EUVD-2025-20092

Analysis Generated

Mar 16, 2026 - 02:42 vuln.today

PoC Detected

Aug 06, 2025 - 17:48 vuln.today

Public exploit code

CVE Published

Jul 04, 2025 - 23:15 nvd

CRITICAL 9.4

DescriptionGitHub Advisory

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In vulnerable versions of the application, a password comparison is performed using the operator at line 40 in front/index.php. This introduces a security issue where specially crafted "magic hash" values that evaluate to true in a loose comparison can bypass authentication. Because of the use of instead of the strict ===, different strings that begin with 0e and are followed by only digits can be interpreted as scientific notation (i.e., zero) and treated as equal. This issue falls under the Login Bypass vulnerability class. Users with certain "weird" passwords that produce magic hashes are particularly affected. Services relying on this logic are at risk of unauthorized access. Version 25.6.7 fixes the vulnerability.

Analysis

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials.

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.