CVE-2025-62586: OPEXUS FOIAXpress unauthenticated administrator password reset
OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password. Fixed in FOIAXpress version 11.13.2.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OPEXUS FOIAXpressto a version that resolves this vulnerability.Fixed in 11.13.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62586?
CVE-2025-62586 is classified as a critical vulnerability due to its potential for remote, unauthenticated access to reset the administrator password.
How do I fix CVE-2025-62586?
To fix CVE-2025-62586, upgrade OPEXUS FOIAXpress to version 11.13.2.0 or later.
Who is affected by CVE-2025-62586?
Any user running versions of OPEXUS FOIAXpress prior to 11.13.2.0 is affected by CVE-2025-62586.
What type of attack does CVE-2025-62586 enable?
CVE-2025-62586 enables a remote, unauthenticated attacker to reset the administrator password.
When was CVE-2025-62586 published?
CVE-2025-62586 was published in 2025, indicating a significant security vulnerability for OPEXUS FOIAXpress.