Medium severity5.3NVD Advisory· Published Nov 18, 2025· Updated Jun 17, 2026
CVE-2025-59116
CVE-2025-59116
Description
Windu CMS is vulnerable to User Enumeration. This issue occurs during logon, where a difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins.
Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- JCD/Windu CMSv5Range: 0
Patches
Vulnerability mechanics
References
2- cert.pl/posts/2025/11/CVE-2025-59110nvdThird Party Advisory
- windu.orgnvdProduct
News mentions
0No linked articles in our index yet.