CVE-2025-55034High· 8.2▾ TwilightGeneral Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-41021High· 7.5Eaton easyE4 uses an insufficiently strong password policy
CVE-2026-112193Low· 3.7Webkul Aureus ERP UserForm.php weak password
CVE-2025-11322Low· 3.7A flaw has been found in Mangati NovoSGA up to 2.2.12
CVE-2025-23408Medium· 6.5Weak Password Requirements vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.10.1. The issue is fixed in version 1.11.0. Users are encouraged to upgrade to version 1.13.0, the latest release.
CVE-2025-9964NoneNo password for the root user is set in Novakon P series
CVE-2025-67513NoneFreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems