CVE-2025-46274

Summary

CVE-2025-46274 is a vulnerability affecting UNI-NMS-Lite, where hard-coded credentials are used without authentication. An attacker can exploit this weakness to gain unauthorized access to the managed database, enabling them to read, manipulate, and create entries. This issue poses a significant risk, as it allows unauthenticated intrusion into the system's sensitive data, potentially leading to data breaches or unintended modifications. It is highly recommended that users update their UNI-NMS-Lite installations with appropriate security measures, such as removing hard-coded credentials and implementing strong authentication methods, to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.