Medium severityNVD Advisory· Published Jan 14, 2026· Updated Apr 15, 2026

CVE-2025-13175

Description

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ 6 in versions before MU106.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cert.pl/en/posts/2026/01/CVE-2025-13175nvd
docs.ysoft.cloud/safeq6/latest/safeq6/release-notes-build-106nvd
www.ysoft.com/safeqnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000