VulnSea

ascertia has 4 CVEs on record. The busiest recent month was October 2025 with 4. The median CVSS is 7.8 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
7.8
Publish → KEV
Last 90 days
0 prev 0

Products

  • signinghub 4
4
Total CVEs
1
Critical
0
CISA KEV
0
Exploited

ascertia vulnerabilities

CVEs affecting ascertia, newest first. Open any entry for full detail, references, and exploit status.

4 CVEsRSS

CVE-2025-56224High· 8.1PoC
11mo ago

A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.

A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.

Midnightascertia · signinghubEPSS 0.39%via NVD
CVE-2025-56223High· 7.5PoC
11mo ago

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.

Midnightascertia · signinghubEPSS 0.46%via NVD
CVE-2025-56219High· 7.1PoC
11mo ago

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user acco…

Midnightascertia · signinghubEPSS 0.32%via NVD
CVE-2025-56218Critical· 9.8PoC
11mo ago

An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Abyssalascertia · signinghubEPSS 0.63%via NVD
ascertia vulnerabilities (CVEs) · VulnSea