CVE-2025-54833 OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass
Attackers can bypass account lockout and CAPTCHA protections in FOIAXpress PAL to facilitate brute-force password attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-54833?
CVE-2025-54833 is a medium-severity vulnerability in OPEXUS FOIAXpress Public Access Link (PAL), published on 31 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.
Which versions are affected by CVE-2025-54833?
It affects 1 product.
Products include Opexustech Foiaxpress Public Access Link.
How do I fix CVE-2025-54833?
No fix has been published for CVE-2025-54833 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-54833 being exploited?
There is no known exploitation of CVE-2025-54833 in the wild and no public exploit code.
Other vulnerabilities in OPEXUS FOIAXpress Public Access Link (PAL)
Sources
Also known as GHSA-p9p4-h5gm-3hf5.