CVE-2025-60954

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-24

Last updated on: 2025-10-28

Assigner: MITRE

Description

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-24

Last Modified

2025-10-28

Generated

2026-07-06

AI Q&A

2025-10-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60954

EUVD

EUVD-2025-35888

Affected Vendors & Products

Vendor	Product	Version / Range
microweber	microweber	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-521	The product does not require that users should have strong passwords.

Attack-Flow Graph

Executive Summary

Microweber CMS 2.0 has weak password requirements because it does not enforce minimum password length or complexity during password resets. This allows users to set very weak passwords, including single-character passwords, which increases the risk of account compromise, including for administrative accounts.

Impact Analysis

This vulnerability can lead to account compromise due to weak passwords, potentially allowing attackers to gain unauthorized access to user and administrative accounts. This can result in loss of confidentiality, integrity, and availability of the system and its data.

Mitigation Strategies

To mitigate this vulnerability, immediately enforce strong password policies in Microweber CMS 2.0 by configuring or updating the application to require minimum password length and complexity during password resets. Ensure that users cannot set weak passwords such as single-character passwords. Additionally, review and reset passwords for administrative accounts to comply with strong password requirements.

Hi! I’m here to help you understand CVE-2025-60954. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70