CVE-2025-27254

Summary

CVE-2025-27254 is an authentication bypass vulnerability affecting GE Vernova EnerVista UR Setup. By manipulating a specific Windows registry setting, an attacker can disable the software's startup authentication, allowing unauthorized access. This issue grants users, including potential adversaries, the ability to bypass authentication checks and gain unauthorized access to the system. The vulnerability poses a significant risk, as it enables attackers to access sensitive information or make unauthorized modifications. It is crucial that affected organizations apply the necessary patches or mitigations to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.