CVE-2025-14751

published 2026-01-22

CVE-2025-14751: A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege…

Priority P3 57 high 8.7 CVSS 4.0

AV N AC L AT N PR L UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A low-privileged user can bypass account credentials without confirming the user's current authentication state, which may lead to unauthorized privilege escalation.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
weintek	cmt-ctrl01	>= 20230308 < 20250827	20250827
weintek	cmt-svrx-820	>= 20220413 < 20240919	20240919
weintek	cmt3072xh	>= 20200630 < 20241112	20241112

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-620