CVE-2025-12508

—

CVSS 3.1

8.4 high

EPSS

<1%p9

Published

Oct 31, 2025 (Oct 31, 2025)

Modified

Jun 17, 2026

Description

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality.

Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.