CVE-2025-56219

—

CVSS 3.1

7.1 high

EPSS

<1%p23

Published

Oct 20, 2025 (Oct 20, 2025)

Modified

Jul 5, 2026

Description

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.

Vendors: ascertia
Products: signinghub
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.