{"id":"CVE-2025-56333","title":"An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component","summary":"An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-287"],"vendor":"pangolin","product":"pangolin","affected":["pangolin < 1.7.0"],"patched":["pangolin 1.7.0"],"published":"2025-12-29","updated":"2026-10-13","sourceUpdated":"2026-10-13T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-56333","references":[{"url":"https://gist.github.com/mrdgef/ef6fa41d69c0457874414c163d7d7d75","label":"cve@mitre.org"},{"url":"https://github.com/fosrl/pangolin","label":"cve@mitre.org"},{"url":"https://gist.github.com/mrdgef/ef6fa41d69c0457874414c163d7d7d75","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd"],"epss":0.00502,"epssPercentile":0.41199,"ingestedAt":"2026-10-13T10:22:03.530Z","slug":"CVE-2025-56333","body":"## Overview\n\nAn issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component\n\n## Affected\n\n- `pangolin < 1.7.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `pangolin 1.7.0`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}