CVE-2025-28389

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack...

CVE-2025-28389

creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 16:37:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18314 2025-06-13 17:05:18+00:00| published-proof-of-concept|...

CVE-2025-28389

The OpenC3 COSMOS v6.0.0 application is vulnerable to authentication bypass due to weak password requirements . The software supports clear-text passwords, which enables an attacker to gain unauthorized access via a brute force attack . As a mitigation, users are advised to use authentication tok...

CVE-2025-28389

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack...