CVE-2018-25134 | Synaccess netBooter NP-02x/NP-08x up to 6.10 POST webNewAcct.cgi missing authentication (Exploit 45920 / EDB-45920)

December 25, 2025 Yanac

A vulnerability has been found in Synaccess netBooter NP-02x and NP-08x up to 6.10 and classified as critical. The affected element is an unknown function of the file webNewAcct.cgi of the component POST Handler. Performing manipulation results in missing authentication.

This vulnerability is known as CVE-2018-25134. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More