---
id: CVE-2025-15016
title: >-
  Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic
  Key vulnerability, allowing unauthenticated remote attackers to exploit the
  fixed key to generate verification information and log into the system as any
  user.
summary: >-
  Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic
  Key vulnerability, allowing unauthenticated remote attackers to exploit the
  fixed key to generate verification information and log into the system as any
  user.
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-321
vendor: ragic
product: enterprise_cloud_database
affected:
  - enterprise_cloud_database
published: '2025-12-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15016'
references:
  - url: 'https://www.twcert.org.tw/en/cp-139-10588-771e5-2.html'
    label: twcert@cert.org.tw
  - url: 'https://www.twcert.org.tw/tw/cp-132-10587-797c6-1.html'
    label: twcert@cert.org.tw
tags:
  - nvd
epss: 0.00529
epssPercentile: 0.4335
ingestedAt: '2026-10-14T19:49:57.535Z'
---

## Overview

Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.

## Affected

- `enterprise_cloud_database`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.