CVE-2025-10879 HIGH

CVE-2025-10879: Insufficiently Protected Credentials in Dingtian DT-R002

Vendor Dingtian

Product DT-R002

Weakness CWE-522 · Insufficiently protected credentials

Published September 25, 2025

Last update September 25, 2025

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication.

Key dates

02Disclosure timeline

September 25, 2025 CVE published

September 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-10879 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/522.html

Related vulnerabilities

04Related CVE

CVE-2026-32606 IncusOS has a LUKS encryption bypass due to insufficient TPM policy CVE-2025-64998 Session hijacking via exposed session signing secret in distributed Checkmk setups CVE-2026-34262 Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer CVE-2025-13478 Cache Misconfiguration Leading to Cross-User Data Exposure CVE-2026-41345 OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download