CVE-2025-35058 | Newforma Project Center up to 2023.1 NIX Service MarkupServices.ashx authentication replay

October 9, 2025 Yanac

A vulnerability was found in Newforma Project Center up to 2023.1. It has been declared as critical. This affects an unknown part of the file /UserWeb/Common/MarkupServices.ashx of the component NIX Service. Executing manipulation can lead to authentication bypass by capture-replay.

This vulnerability is tracked as CVE-2025-35058. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More