CVE-2025-1156

Summary

CVE-2025-1156 is a critical vulnerability affecting Pix Software Vivaz 6.0.10. The issue lies within the unknown code of the /servlet?act=login file, and is triggered by manipulating the argument "usuario." This manipulation enables sql injection, allowing remote attacks. Although the vulnerability was reported to the vendor, they have not responded, leaving systems using the software potentially exposed and at risk of exploitation by malicious actors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.