CVE-2025-54833: OPEXUS FOIAXpress Public Access Link (PAL) · Improper Restriction of Excessive Authentication Attempts
Affects OPEXUS FOIAXpress Public Access Link (PAL)Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 46% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 31 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| OPEXUS FOIAXpress Public Access Link (PAL) | Affected
| Fixed in– |
AI-suggested
European organizations should implement the following specific mitigations: 1) Immediately audit FOIAXpress PAL deployments to identify instances running version 11.1.0 and prioritize upgrading to a patched version once available from OPEXUS. 2) In the interim, implement compensating controls such as network-level restrictions (e.g., IP whitelisting or rate limiting) on access to the PAL interface to reduce brute force attack surface. 3) Enforce strong password policies and encourage or mandate multi-factor authentication (MFA) for all user accounts accessing FOIAXpress PAL to mitigate the risk of password guessing. 4) Monitor authentication logs closely for abnormal login attempts or patterns indicative of brute force attacks, and integrate alerts into security information and event management (SIEM) systems. 5) Consider deploying web application firewalls (WAF) with custom rules to detect and block automated login attempts targeting the PAL interface. 6) Conduct user awareness training emphasizing the importance of unique, complex passwords and recognizing suspicious account activity. 7) Coordinate with OPEXUS support channels to obtain timely updates and patches, and verify the integrity of any updates before deployment. These measures go beyond generic advice by focusing on immediate risk reduction through network controls, enhanced monitoring, and user authentication hardening while awaiting official patches.
Description
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.