All 5 CVE vulnerabilities found in vtenext, with AI-generated Chinese analysis, references, and POCs.
Vendor: vtenext
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-71457 | vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php CWE-620 | 9.8 | Critical | 2026-11-04 |
| CVE-2025-71456 | vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView CWE-89 | 8.1 | High | 2026-11-04 |
| CVE-2025-71455 | vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service CWE-200 | 5.3 | Medium | 2026-11-04 |
| CVE-2025-71454 | vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering CWE-352 | 6.5 | Medium | 2026-11-04 |
| CVE-2025-71453 | vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList CWE-79 | 6.1 | Medium | 2026-11-04 |
All 5 known CVE vulnerabilities affecting vtenext with full Chinese analysis, references, and POCs where available.