What is CVE-2025-48952?

CVE-2025-48952 is a critical-severity vulnerability in Jokob-sk Netalertx, classified under Incorrect Comparison. CVSS score: 9.4/10. Published 2025-07-04.

How severe is CVE-2025-48952?

Critical severity. CVSS v3 base score is 9.4 out of 10.

Vulnerability in Jokob-sk Netalertx

CVE-2025-48952

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass password verification using SHA-256 magic hashes, due to loose comparison in PHP. In…

EPSS: 0.005 (68.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.4 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.

Affected products

Jokob-sk Netalertx — versions < 25.6.7

Weakness classification (CWE)

CWE-697 — Incorrect Comparison

References

https://github.com/jokob-sk/NetAlertX/security/advisories/GHSA-4p4p-vq2v-9489 (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2025-48952?: CVE-2025-48952 is a critical-severity vulnerability in Jokob-sk Netalertx, classified under Incorrect Comparison. CVSS score: 9.4/10. Published 2025-07-04.
How severe is CVE-2025-48952?: Critical severity. CVSS v3 base score is 9.4 out of 10.