High severity7.5NVD Advisory· Published Sep 22, 2025· Updated Jun 17, 2026
CVE-2025-57430
CVE-2025-57430
Description
Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3=4.4.4+ 2 more
- (no CPE)range: =4.4.4
- cpe:2.3:a:creacast:creabox_manager:4.4.4:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57430nvdExploitThird Party Advisory
- www.creacast.comnvdProduct
News mentions
0No linked articles in our index yet.