CVE-2025-56551: High severity DirectAdmin DirectAdmin vulnerability

Published Oct 3, 2025

Updated

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content via supplying a crafted GET request.

Affected Software

2 affected components

DirectAdmin DirectAdmin

DirectAdmin DirectAdmin=1.680

Event History

Oct 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-56551?

CVE-2025-56551 is considered a significant vulnerability as it allows unauthorized attackers to manipulate the login interface.

How do I fix CVE-2025-56551?

To fix CVE-2025-56551, update DirectAdmin to the latest version that resolves this vulnerability.

Who is affected by CVE-2025-56551?

Users running DirectAdmin version 1.680 are affected by CVE-2025-56551.

What type of vulnerability is CVE-2025-56551?

CVE-2025-56551 is a manipulation vulnerability that allows attackers to replace legitimate content with arbitrary data.

What happens if I don't address CVE-2025-56551?

Failing to address CVE-2025-56551 can lead to unauthorized content displaying on the login page, which may compromise user credentials.