BaseFortify

Publication date: 2026-01-06

Last updated on: 2026-07-05

Assigner: MITRE

Description

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests in order to operate functionality on the web application without the need to authenticate with legitimate credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-06

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2026-01-06

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60534

EUVD

EUVD-2026-0960

Affected Vendors & Products

Vendor	Product	Version / Range
blue_access	cobalt	02.000.195

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Impact Analysis

The vulnerability can allow unauthorized users to access and operate features of the web application without authentication, potentially leading to unauthorized actions, data exposure, or manipulation within the application.

Executive Summary

This vulnerability is an authentication bypass in Blue Access Cobalt v02.000.195. It allows an attacker to proxy requests selectively and use the web application's functionality without needing to provide valid login credentials.

Hi! I’m here to help you understand CVE-2025-60534. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70