CVE-2025-2413 HIGH

CVE-2025-2413: OTP Bypass in Akinsoft's ProKuafor

Vendor Akinsoft

Product ProKuafor

Weakness CWE-307 · Brute force

Published September 2, 2025

Last update June 6, 2026

View on NVD All CVEs

CVSS base score

8.6/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass. This issue affects ProKuafor: from s1.02.08 before v1.02.08.

Key dates

02Disclosure timeline

September 2, 2025 CVE published

June 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-2413 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/307.html

Related vulnerabilities

04Related CVE

CVE-2026-33763 AVideo has an Unauthenticated Video Password Brute-Force Vulnerability via Unrate-Limited Boolean Oracle CVE-2024-32868 ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass CVE-2023-36917 Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform CVE-2026-25114 CloudCharge cloudcharge.se Improper Restriction of Excessive Authentication Attempts CVE-2026-22278