CVE-2025-30236

CVE-2025-30236 affects Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515. A POST request containing a SESSION parameter can bypass the password check and authenticate with a six‑digit TOTP code, enabling potential unauthorized access. The CVSS 3.1 base score is 8.6 (HIGH) with network attack...