CVE-2025-53704 HIGH

CVE-2025-53704: MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password

Vendor Maxhub

Product Pivot client application

Weakness CWE-640 · Weak password recovery

Published December 4, 2025

Last update December 5, 2025

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.

Key dates

December 4, 2025 CVE published

December 5, 2025 Record updated

External resources

Related vulnerabilities