CVE-2025-69615

published 2026-03-10

CVE-2025-69615: Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected…

Priority P3 58 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025-11-03.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
telekom	account_management_portal	<= 2025-10-24	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-307