CVE-2025-28059 Auth bypass in n/a
Deleted users retain access to system resources due to improper session invalidation, allowing unauthorized access to restricted functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-28059?
CVE-2025-28059 is a high-severity authentication bypass vulnerability in n/a, published on 18 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke associated API tokens, enabling unauthorized access to restricted functions.
Weakness: CWE-613
Which versions are affected by CVE-2025-28059?
It affects 1 product.
Products include Nagios Network Analyzer.
How do I fix CVE-2025-28059?
No fix has been published for CVE-2025-28059 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-28059 being exploited?
There is no known exploitation of CVE-2025-28059 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-28925 SQL injection in n/a
- CVE-2025-34280 Nagios Network Analyzer < 2024R2.0.1 RCE in LDAP Certificate Removal Function
- CVE-2021-28924 Cross-site scripting in n/a
- CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu
- CVE-2025-34278 Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS
Sources
Also known as GHSA-rw8h-4h76-h2mx.