CVE-2025-63226

The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160 , V60.1.4 , and V60.1.29 ) is vulnerable to session hijacking due to improper session management on the /UserManagement.html endpoint. An attacker located on the same network as a victim can access this endpoint by leveraging an ac...