Vulnerabilities

TI-2025-35542 CVE-2025-57439 · GHSA-vhm5-xv2f-rgj2

Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability…

HIGH 73

Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00827 Published 2025-09-22 No fix listed CWE-94

TI-2025-35539 CVE-2025-57434 · GHSA-7pp7-w996-v434

HIGH 73

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00487 Published 2025-09-22 No fix listed CWE-287

TI-2025-35535 CVE-2025-57430 · GHSA-f95q-xgqf-f5p2

HIGH 72

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2025-09-22 No fix listed CWE-200