CVE-2025-15456
Published: 05 January 2026
Summary
CVE-2025-15456 is a medium-severity Improper Authentication (CWE-287) vulnerability in 1234N Minicms. Its CVSS base score is 6.9 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 30.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and IA-8 (Identification and Authentication (Non-organizational Users)).
Deeper analysis
CVE-2025-15456 is an improper authentication vulnerability (CWE-287) affecting bg5sbk MiniCMS versions up to 1.8. The issue resides in an unknown function within the /mc-admin/page-edit.php file, part of the Publish Page Handler component. It carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating high severity due to its network accessibility and lack of prerequisites.
Remote attackers require no privileges or user interaction to exploit this vulnerability. Successful exploitation allows limited impacts on confidentiality, integrity, and availability, potentially enabling unauthorized access or manipulation aligned with the improper authentication flaw.
Advisories referenced in VulDB (ctiid.339489, id.339489, submit.725138) and a GitHub issue (ueh1013/VULN/issues/13) detail the vulnerability, noting that an exploit has been publicly disclosed and may be actively used. No patches or mitigations are mentioned, as the vendor was contacted early but provided no response.
The vulnerability's existence remains disputed, with no confirmed real-world exploitation reported in available details.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-0913
Vulnerability details
A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from…
more
remote. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. The vendor was contacted early about this disclosure but did not respond in any way.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Improper authentication (CWE-287) in a publicly accessible admin handler (/mc-admin/page-edit.php) directly enables remote exploitation of a public-facing web application with no credentials or interaction required.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces authentication and authorization checks before allowing any access to the page-edit.php Publish Page Handler.
Requires identification and authentication of non-organizational users before granting access to remotely exposed admin functions.
Mandates authorization and encryption for all remote access to the administrative interface, blocking unauthenticated network requests.