CVE-2025-27450 — CVE-2025-27450
The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to the server and in…
Published: 2025-07-03 · CVSS: 6.5 · CVSS 3.1
The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to the server and intercept the request containing the PHPSESSID cookie.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7