CVE-2025-15456
Published: 05 January 2026
Summary
CVE-2025-15456 is a high-severity Improper Authentication (CWE-287) vulnerability in 1234N Minicms. Its CVSS base score is 7.3 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 44.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Threat & Defense at a Glance
Threat & Defense Details
Likely Mitigating ControlsAI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Detects unauthorized successful logons resulting from improper authentication implementations.
Documented procedures ensure personnel are trained on authentication mechanisms, tangibly lowering the risk of improper authentication being exploited.
Security awareness training instructs users on secure authentication practices and avoiding credential compromise.
Training on authentication mechanisms and best practices decreases the occurrence of improper authentication.
Non-repudiation requires strong authentication mechanisms to irrefutably attribute performed actions to specific individuals or processes.
Session content review can reveal authentication bypasses or failures in session establishment.
Review of authentication-related audit records can detect improper authentication mechanisms or bypasses.
Assessments check authentication mechanisms for correct implementation and effectiveness, reducing successful authentication bypass attempts.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Improper authentication (CWE-287) in a publicly accessible admin handler (/mc-admin/page-edit.php) directly enables remote exploitation of a public-facing web application with no credentials or interaction required.
NVD Description
A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from…
more
remote. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. The vendor was contacted early about this disclosure but did not respond in any way.
Deeper analysisAI
CVE-2025-15456 is an improper authentication vulnerability (CWE-287) affecting bg5sbk MiniCMS versions up to 1.8. The issue resides in an unknown function within the /mc-admin/page-edit.php file, part of the Publish Page Handler component. It carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating high severity due to its network accessibility and lack of prerequisites.
Remote attackers require no privileges or user interaction to exploit this vulnerability. Successful exploitation allows limited impacts on confidentiality, integrity, and availability, potentially enabling unauthorized access or manipulation aligned with the improper authentication flaw.
Advisories referenced in VulDB (ctiid.339489, id.339489, submit.725138) and a GitHub issue (ueh1013/VULN/issues/13) detail the vulnerability, noting that an exploit has been publicly disclosed and may be actively used. No patches or mitigations are mentioned, as the vendor was contacted early but provided no response.
The vulnerability's existence remains disputed, with no confirmed real-world exploitation reported in available details.
Details
- CWE(s)