Telekom

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Telekom records in CISA KEV

No Telekom vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Account Management Portal · all components

TI-2025-42891 CVE-2025-69614 · GHSA-5976-fhm4-832h

MEDIUM 47

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00438 Published 2026-03-10 No fix listed CWE-640

TI-2025-42892 CVE-2025-69615 · GHSA-w329-4xm8-g68x

MEDIUM 46

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00507 Published 2026-03-10 No fix listed CWE-307