HYDRA X, MIP 2 and FEDRA 2 of MPDV Mikrolab GmbH suffer from an unauthenticated local file disclosure vulnerability in all releases until Maintenance Pack 36 with Servicepack 8 (week 36/2025), which allows an attacker to read arbitrary files from the Windows operating system. The "Filename" parameter of the public $SCHEMAS$ ressource is vulnerable and can be exploited easily.
MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 References: https://seclists.org/fulldisclosure/2025/Oct/28 https://nvd.nist.gov/vuln/detail/CVE-2025-12055 Remediation: Update to Maintenance Pack 36 with Servicepack 8 (week 36/2025) or later.
url
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →