Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2025-25570

9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Updated Nov 10, 2026View on NVD →
S4E scanner
criticalExposed Panels~10 seconds

Vue Vben Admin - Default Credentials

Vue Vben Admin 2.10.1 contains a broken authentication caused by hardcoded credentials in the backend, letting attackers log in without proper authorization, exploit requires access to the login interface. References: https://github.com/vbenjs/vue-vben-admin https://doc.vvbin.cn/ Remediation: Remove hardcoded credentials and implement proper authentication mechanisms, update to the latest version if available.

Used 20 times · 10 assets checked · domain, subdomain, ipv4

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →