CVE-2025-566765.4MediumCWE-1259

CVE-2025-56676: Titansystems Zender vulnerability

Titansystems · Zender

Affected: Titansystems Zender · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days

26th percentile

050100

Higher than 26% of scored CVEs

5.4MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality. A temporary password or reset token issued to one user can be used to log in as another user, due to improper validation of token-user linkage. This allows remote attackers to gain unauthorized access to any user account by exploiting the password reset mechanism. The vulnerability occurs because the reset token is not correctly bound to the requesting account and is accepted for other user emails during login, enabling privilege escalation and information disclosure.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Improper Restriction of Security Token Assignment · Other weaknesses
Published: September 2025
Band: Unlikely (under 1%), September 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-56676 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.