Vulnerability in Sage 200 Spain
CVE-2025-1886
Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.
EPSS: 0.003 (22.1th percentile) — read the EPSS interpretation.
Affected products
- Sage 200 Spain — versions 2025.35.000
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-1886?
- CVE-2025-1886 is a vulnerability in Sage 200 Spain, classified under Insufficiently Protected Credentials. Published 2025-03-07.
- Is CVE-2025-1886 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.