Threats tagged 'ghsa-8xf9-xq28-hpj9'

CVE-2025-10640 is a critical authentication bypass vulnerability in the WorkExaminer Professional console. An unauthenticated attacker with network access to TCP port 12306 can bypass the login prompt due to missing server-side authentication checks. This allows the attacker to gain administrative access to the WorkExaminer server and access sensitive monitoring data such as screenshots and keystrokes of all users.