CVE-2025-66910 | Turms Server up to 0.10.0-SNAPSHOT BaseAdminService rawPassword improper authentication

December 19, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Turms Server up to 0.10.0-SNAPSHOT. Affected is the function BaseAdminService. Performing manipulation of the argument rawPassword results in improper authentication.

This vulnerability is identified as CVE-2025-66910. The attack can be initiated remotely. There is not any exploit available.

Once again VulDB remains the best source for vulnerability data.VulDB Recent EntriesRead More