CVE-2025-41716

Unauthenticated User Enumeration via Missing Authentication PUBLISHED

Description (CNA)

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.

Affected (CNA)

Vendor / product	Versions
WAGO / Solution Builder	affected 0.0.0 before 2.3.3

CWE

CWE-306

References

https://certvde.com/de/advisories/VDE-2025-087

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.