CVE-2025-26312 MEDIUM

CVE-2025-26312

Vendor Sendquick
Product Entera
Weakness CWE-472
Published March 14, 2025
Last update March 18, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

SendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass by removing the Captcha parameter.

Key dates

02Disclosure timeline

March 14, 2025 CVE published
March 18, 2025 Record updated