CVE-2025-11446: High severity upKeeper Solutions upKeeper Manager vulnerability
Published Nov 19, 2025
·Updated
Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12.
Affected Software
2 affected components
upKeeper Solutions upKeeper Manager>5.2.0<=5.2.12
upKeeper upKeeper Manager>=5.0.0<5.2.13.1
Event History
Nov 19, 2025
CVE Published
via MITRE·08:53 AM
Data Sourced
via MITRE·08:53 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11446?
CVE-2025-11446 is considered a medium severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2025-11446?
To fix CVE-2025-11446, upgrade your upKeeper Manager software to version 5.2.12 or later.
3
What specific versions of upKeeper Manager are vulnerable to CVE-2025-11446?
Versions of upKeeper Manager from 5.2.0 to 5.2.11 are vulnerable to CVE-2025-11446.
4
What type of sensitive information is affected by CVE-2025-11446?
CVE-2025-11446 can lead to the logging of known domain credentials, which are potentially sensitive.
5
Is user action required to mitigate CVE-2025-11446?
Yes, users must upgrade their upKeeper Manager software to mitigate CVE-2025-11446.