CVE-2025-55299

VaulTLS is a modern solution for managing mTLS (mutual TLS) certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the password based login only effected the frontend, but still allowed login via the API. This vulnerability is fixed in 0.9.1.

Scoring

Severity

CRITICAL

CVSS base score

9.4

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS probability

0.22%

CWE

CWE-521

Published

2025-08-18

Last modified

2026-03-12

Affected products

• 7ritn VaulTLS

Weakness type

• CWE-521

Related vulnerabilities

• CVE-2026-85216 — MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials
• CVE-2026-19293 — SMP security request
• CVE-2026-12504 — Loytec LINX firmware: Improper Authentication in PAM configuration
• CVE-2026-56577 — HCL MyCloud affected by Weak Password Policy
• CVE-2026-35097 — Weak Password Requirements in KTM System e-BOK
• CVE-2026-11493 — Tenda AC15 Samba smb.conf weak password
• CVE-2024-40684 — IBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism
• CVE-2026-9394 — Besen BS20 EV Charging Station Bluetooth Low Energy weak password

Markdown version · Browse all CVEs