← Database

CVE-2025-26201

CRITICAL CVSS: 9.1 Published: 2025-02-24 Modified: 2026-07-05

Description

Credential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges.

Affected Platforms

Unknown

Weakness Type

CWE-294

References