CVE-2025-48464

MediumCVSS 4.7/10Last modified Oct 8, 2026

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2025
Last modified: Oct 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-484668.1Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digita CVE-2025-484676.5Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-serv CVE-2025-484686.4Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify fir CVE-2025-484699.6Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potent CVE-2025-48479.8A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the compon CVE-2025-484704.1Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fie CVE-2025-484719.8FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insuffici CVE-2025-484728.1FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabli CVE-2025-484734.3FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, when creating a conversation from a message in anoth CVE-2025-484748.1FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access right CVE-2025-484758.1FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "client CVE-2025-484768.8FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill(