{"id":"CVE-2025-50433","title":"An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.","summary":"An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-640"],"vendor":"monnit","product":"imonnit","affected":["imonnit"],"published":"2025-11-26","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-50433","references":[{"url":"https://github.com/0xMandor/imonnit-ato-advisory/blob/main/CVE-2025-50433.md","label":"cve@mitre.org"},{"url":"https://youtu.be/-BqcdwHgMMA","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.00431,"epssPercentile":0.36791,"ingestedAt":"2026-07-06T16:44:34.439Z","exploits":{"github":1,"githubRepos":["https://github.com/0xMandor/CVE-2025-50433"],"checkedAt":"2026-09-21T15:27:26.793Z"},"exploitAvailable":true,"slug":"CVE-2025-50433","body":"## Overview\n\nAn issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.\n\n## Affected\n\n- `imonnit`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4827,"id":"CVE-2025-50433","ts":1788887209567,"field":"exploit_available","old":"false","new":"true"},{"seq":3710,"id":"CVE-2025-50433","ts":1788886326616,"field":"exploit_available","old":"true","new":"false"},{"seq":2555,"id":"CVE-2025-50433","ts":1788883008166,"field":"exploit_available","old":"false","new":"true"},{"seq":1584,"id":"CVE-2025-50433","ts":1788882408267,"field":"exploit_available","old":"true","new":"false"},{"seq":698,"id":"CVE-2025-50433","ts":1788881845413,"field":"exploit_available","old":"false","new":"true"}]}