CVE-2025-63211

A stored cross-site scripting (XSS) vulnerability exists in bridgetech VBC Server & Element Manager firmware versions 6.5.0-9 through 6.5.0-10 . The flaw stems from improper neutralization of input within the addName parameter of the /vbc/core/userSetupDoc/userSetupDoc endpoint. Successful exploi...

CVE-2025-63214

An improper access control vulnerability exists in the bridgetech VBC Server & Element Manager broadcast core software platform. Affected products include firmware versions 6.5.0-9 and 6.5.0-10 . This flaw allows unauthorized attackers to create and delete arbitrary accounts , potentially comprom...