High severity7.5NVD Advisory· Published Sep 22, 2025· Updated Jun 17, 2026
CVE-2025-35041
CVE-2025-35041
Description
Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:airship.ai:acropolis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:airship.ai:acropolis:*:*:*:*:*:*:*:*range: <10.2.35
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-265-01.jsonnvdThird Party Advisory
- www.cve.org/CVERecordnvdThird Party Advisory
News mentions
0No linked articles in our index yet.