An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format
References
| Link | Resource |
|---|---|
| http://n3uron.com | Product |
| https://gist.github.com/JoseAbreu28/67f5d8bfc7ba1def526efeda5771a244 | Exploit Third Party Advisory |
| https://www.linkedin.com/in/joselabreu | Not Applicable |
| https://gist.github.com/JoseAbreu28/67f5d8bfc7ba1def526efeda5771a244 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2026, 20:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:n3uron:web_user_interface:1.21.6-230825.1720:*:*:*:*:*:*:* cpe:2.3:a:n3uron:web_user_interface:1.21.7-240207.1047:*:*:*:*:*:*:* cpe:2.3:a:n3uron:web_user_interface:1.21.13-250422.0858:*:*:*:*:*:*:* |
|
| First Time |
N3uron
N3uron web User Interface |
|
| References | () http://n3uron.com - Product | |
| References | () https://gist.github.com/JoseAbreu28/67f5d8bfc7ba1def526efeda5771a244 - Exploit, Third Party Advisory | |
| References | () https://www.linkedin.com/in/joselabreu - Not Applicable |
03 Feb 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-327 | |
| References | () https://gist.github.com/JoseAbreu28/67f5d8bfc7ba1def526efeda5771a244 - |
29 Jan 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-29 20:16
Updated : 2026-02-13 20:32
NVD link : CVE-2025-69929
Mitre link : CVE-2025-69929
CVE.ORG link : CVE-2025-69929
JSON object : View
Products Affected
n3uron
- web_user_interface
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm