AttackFeed by Joe Wagner | SEC Consult SA-20250923-0 :: Missing Certificate Validation leading to RCE in CleverControl employee monitoring software #CVE-2025-10548  - Full Disclosure

SEC Consult SA-20250923-0 :: Missing Certificate Validation leading to RCE in CleverControl employee monitoring software #CVE-2025-10548  – Full Disclosure

Posted on By Joe-W No Comments on SEC Consult SA-20250923-0 :: Missing Certificate Validation leading to RCE in CleverControl employee monitoring software #CVE-2025-10548  – Full Disclosure
Alert Feeds

 

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 25

SEC Consult Vulnerability Lab Security Advisory < 20250923-0 >
=======================================================================
title: Missing Certificate Validation leading to RCE
product: CleverControl employee monitoring software
vulnerable version: 11.5.1041.6
fixed version: –
CVE number: CVE-2025-10548
impact: high
homepage: https://clevercontrol.com…
 – Read More  – Full Disclosure 

You may also like

Alert Feeds
libvips v8.18.0 Function Pointer Type Confusion in libvips Callback Dispatch  – Full Disclosure
September 16, 2025
Alert Feeds
KL-001-2025-009: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution  – Full Disclosure
July 9, 2025
Alert Feeds
Stored XSS “Create Page” Functionality – seotoasterv2.5.0  – Full Disclosure
July 29, 2025
Alert Feeds
[SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files  – Full Disclosure
October 13, 2025

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.