Vulnerabilities (CVE)

Filtered by vendor Bridgetech Subscribe
Filtered by product Vbc Server
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-63211 1 Bridgetech 1 Vbc Server 2026-01-15 N/A 6.1 MEDIUM
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
CVE-2025-63214 1 Bridgetech 5 Vb120, Vb220, Vb330 and 2 more 2025-12-11 N/A 6.5 MEDIUM
An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.