Mersive Solstice Pod Api Session Key Extraction Via Api Endpoint

1 CVEs affecting Mersive Solstice Pod Api Session Key Extraction Via Api Endpoint. Latest disclosed: 2025-12-04. Critical: 0, High: 1.

Top CVEs affecting Mersive Solstice Pod Api Session Key Extraction Via Api Endpoint
CVESeverityScorePublishedSummary
CVE-2025-66573High7.52025-12-04Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server…