CVE-2025-58741

High

Published: 20 January 2026

Published

20 January 2026

Modified

10 February 2026

KEV Added

—

Patch

—

CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score 0.0004 11.2th percentile

Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-58741 is a high-severity Insufficiently Protected Credentials (CWE-522) vulnerability in Milner Imagedirector Capture. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Unsecured Credentials (T1552); ranked at the 11.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

Threat & Defense at a Glance

What attackers do: exploitation maps to Unsecured Credentials (T1552).

Threat & Defense Details

Likely Mitigating ControlsAI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AT-2 Literacy Training and Awareness

addresses: CWE-522

Training instructs users on protecting credentials from disclosure or unauthorized access.

AT-4 Training Records

addresses: CWE-522

Training records for security awareness and role-based training verify education on credential protection practices, tangibly reducing risks from mishandling or exposing credentials.

IA-5 Authenticator Management

addresses: CWE-522

Protecting authenticator content from unauthorized disclosure and modification while requiring protective controls addresses insufficiently protected credentials.

PL-4 Rules of Behavior

addresses: CWE-522

Rules of behavior include credential protection and non-sharing requirements, reducing exposure of insufficiently protected credentials.

PS-4 Personnel Termination

addresses: CWE-522

Terminating or revoking credentials stops use of insufficiently protected or lingering credentials post-termination.

SC-28 Protection of Information at Rest

addresses: CWE-522

Requiring confidentiality/integrity protection for stored credentials directly mitigates insufficiently protected credentials on disk or in configuration stores.

SC-37 Out-of-band Channels

addresses: CWE-522

Credentials or keys delivered out-of-band are not exposed to interception or inadequate protection on the main transport.

MITRE ATT&CK Enterprise TechniquesAI

T1552 Unsecured Credentials Credential Access

Adversaries may search compromised systems to find and obtain insecurely stored credentials.

attack.mitre.org →

Why these techniques?

Direct exposure of insufficiently protected application credentials (CWE-522) enables retrieval without authentication, matching T1552 Unsecured Credentials.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808.

Deeper analysisAI

CVE-2025-58741, published on 2026-01-20, is an Insufficiently Protected Credentials vulnerability (CWE-522) in the Credential Field of Milner ImageDirector Capture. This issue affects versions from 7.0.9 through 7.6.3.25808. The vulnerability enables retrieval of credential material, which can be leveraged for unauthorized database access. It has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating high confidentiality impact with low attack complexity.

A remote network attacker requires no privileges, authentication, or user interaction to exploit this vulnerability. By targeting the Credential Field, the attacker can extract stored credentials, enabling subsequent unauthorized access to the connected database and potential exposure of sensitive data.

Mitigation details are available in the advisory at https://sra.io/advisories.