High severityNVD Advisory· Published May 29, 2025· Updated Apr 15, 2026

CVE-2025-48045

Description

An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

No linked articles in our index yet.