CVE-2025-35061 | Newforma Project Center up to 2023.1 NIX Service LegacyIntegrationServices.asmx authentication replay

October 9, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Newforma Project Center up to 2023.1. Affected by this vulnerability is an unknown functionality of the file /NPCSRemoteWeb/LegacyIntegrationServices.asmx of the component NIX Service. This manipulation causes authentication bypass by capture-replay.

This vulnerability is handled as CVE-2025-35061. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More