CVE-2025-50454: An Authentication Bypass in Blue Access' Cobalt X1 thru 02
Source CVE Database V5
Not known to be exploited · CVSS 6.5 Medium.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 22% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 5 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Given the lack of an official patch, European organizations should immediately implement compensating controls. These include isolating the affected Blue Access Cobalt X1 systems within segmented network zones with strict access controls and monitoring. Multi-factor authentication (MFA) should be enforced at network and application layers where possible to reduce the risk of unauthorized access. Organizations should conduct thorough audits of existing administrative accounts and credentials, disabling any unnecessary or default accounts. Continuous monitoring and logging of authentication attempts and administrative activities are critical to detect suspicious behavior early. If possible, restrict administrative access to trusted IP addresses or VPN connections. Engage with Blue Access support or vendor channels to obtain updates or patches as soon as they become available. Finally, organizations should prepare incident response plans specific to this vulnerability to rapidly contain and remediate any exploitation attempts.
Description
An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an unauthorized attacker to log into the application as an administrator without valid credentials.