CVE-2025-26343

Summary

CVE-2025-26343 is a newly disclosed vulnerability affecting Q-Free MaxTime versions 2.11.0 and below. This weakness, classified as CWE-1390 "Weak Authentication," allows unauthenticated attackers to launch brute-force attacks on user PINs by sending multiple crafted HTTP requests. The vulnerability can be exploited remotely, making it a significant security risk. Attackers can gain unauthorized access to user accounts and potentially sensitive information. Users are urged to upgrade to the latest version of Q-Free MaxTime to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.