Melis Platform CMS Unauthenticated Admin Account Creation
Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-10352US | —OT elevated | Exploit | ||
Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a reques… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/ivansmc00/CVE-2025-10352-POCWEB
- https://github.com/melisplatform/melis-corePACKAGE
- https://github.com/melisplatform/melis-core/commit/e938dd14e108b921e6a399b35976dfb429c41df5WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-10352ADVISORY
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platformWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan