CVE-2025-4994None▾ SunlitThe SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configura…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-6266High· 8.3A flaw was found in the AAP gateway
CVE-2026-10537Medium· 5.3Remote unauthenticated information disclosure and denial of service due to unauthenticated service access
CVE-2025-41450High· 8.2Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
CVE-2026-110883Medium· 6.5WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability
CVE-2026-111283Critical· 9.0BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
CVE-2024-42513Medium· 5.3Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.