QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-8260

Back to search

CVE-2025-8260

Published: Jul 28, 2025

Modified: Apr 15, 2026

PUBLISHED

CVSS v3.1

3.1

LOW

Description

A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /grid/vgrid_server.php of the component Web interface. Performing a manipulation of the argument xajaxargs results in use of weak hash. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. Upgrading to version 5.1.1 and 5.4.1 is able to mitigate this issue. Upgrading the affected component is recommended.

VendorProductVersions

Vaelsys

VaelsysV4

affected
5.0
affected
5.1
affected
5.1.0
affected
5.2
affected
5.3

+3 more versions

Weaknesses (CWE)

CWE-328
CWE-327

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now