CVE-2025-4558 — WormHole Tech GPM - Unverified Password Change
The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password…
Published: 2025-05-12 · CVSS: 9.3 · CVSS 4.0
The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7