CVE-2025-63214

An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts...

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

CVE-2025-63214

An improper access control vulnerability exists in the bridgetech VBC Server & Element Manager broadcast core software platform. Affected products include firmware versions 6.5.0-9 and 6.5.0-10 . This flaw allows unauthorized attackers to create and delete arbitrary accounts , potentially comprom...