# CVE-2025-4526

## Summary

- **CVE ID:** CVE-2025-4526
- **Severity:** MEDIUM
- **CVSS Score:** 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)
- **CWE:** CWE-549, CWE-200
- **Published:** May 11, 2025
- **Last Modified:** Jul 31, 2026

## Description

A vulnerability, which was classified as problematic, was found in Dígitro NGC Explorer 3.44.15. This affects an unknown part of the component Configuration Page. The manipulation leads to missing password field masking. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected Products

- Dígitro — NGC Explorer (3.44.15)
- Dígitro — NGC Explorer (3.44.0)
- Dígitro — NGC Explorer (3.44.1)
- Dígitro — NGC Explorer (3.44.2)
- Dígitro — NGC Explorer (3.44.3)
- Dígitro — NGC Explorer (3.44.4)
- Dígitro — NGC Explorer (3.44.5)
- Dígitro — NGC Explorer (3.44.6)
- Dígitro — NGC Explorer (3.44.7)
- Dígitro — NGC Explorer (3.44.8)
- Dígitro — NGC Explorer (3.44.9)
- Dígitro — NGC Explorer (3.44.10)
- Dígitro — NGC Explorer (3.44.11)
- Dígitro — NGC Explorer (3.44.12)
- Dígitro — NGC Explorer (3.44.13)
- Dígitro — NGC Explorer (3.44.14)
- Dígitro — NGC Explorer (3.48.0)
- Dígitro — NGC Explorer (3.48.1)
- Dígitro — NGC Explorer (3.48.2)
- Dígitro — NGC Explorer (3.48.3)
- Dígitro — NGC Explorer (3.48.4)
- Dígitro — NGC Explorer (3.48.5)
- Dígitro — NGC Explorer (3.48.6)
- Dígitro — NGC Explorer (3.48.7)
- Dígitro — NGC Explorer (3.48.8)
- Dígitro — NGC Explorer (3.48.9)
- Dígitro — NGC Explorer (3.48.10)
- Dígitro — NGC Explorer (3.48.11)
- Dígitro — NGC Explorer (3.48.12)
- Dígitro — NGC Explorer (3.48.13)
- Dígitro — NGC Explorer (3.48.14)
- Dígitro — NGC Explorer (3.48.15)
- Dígitro — NGC Explorer (3.48.16)
- Dígitro — NGC Explorer (3.48.17)
- Dígitro — NGC Explorer (3.48.18)
- Dígitro — NGC Explorer (3.48.19)
- Dígitro — NGC Explorer (3.48.20)
- Dígitro — NGC Explorer (3.48.21)
- Dígitro — NGC Explorer (3.48.22)

## References

- [CNA](https://vuldb.com/?id.308271)
- [CNA](https://vuldb.com/?ctiid.308271)
- [CNA](https://vuldb.com/?submit.565307)
- [CNA](https://vuldb.com/vuln/308271)
- [CNA](https://vuldb.com/vuln/308271/cti)
- [CNA](https://vuldb.com/submit/565307)
- [CNA](https://digitro.com/recomendacao-10-2026-ctir-gov/)
- [CNA](https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026)
- [CNA](https://vuldb.com/cve/CVE-2025-4526)
- [CNA](https://digitro.com/esclarecimentos-recomendacoes-ctir-gov/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.29%
- **EPSS Percentile:** 20.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._