CVE-2025-54563 - An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure

Back Back to CVE browser

HIGH

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure

Published Nov 24, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.34%

Description

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://desktopalert.net/cve-2025-54563/
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199014
Advisory

Link	Providers	Tags
https://desktopalert.net/cve-2025-54563/		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199014		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 24, 2025

Updated Nov 24, 2025

Reserved Jul 25, 2025

Link CVE-2025-54563

CISA Vulnrichment

Updated Nov 24, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-54563

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-54563

ENISA EUVD

Assigner mitre

Published Nov 24, 2025

Updated Nov 24, 2025

Exploited since n/a

Link EUVD-2025-199014

EUVD-2025-199014