Search
Find a vulnerability
Search criteria
4 vulnerabilities by AsiaInfo International
CVE-2026-125298 (GCVE-0-2026-125298)
Vulnerability from nvd – Published: 2026-11-10 21:53 – Updated: 2026-11-10 21:53
VLAI
EPSS
VEX
Title
AsiaInfo Business Support System (BSS) Missing JWT Signature Verification
Summary
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · cisa-cg (v2.0.3)
Decision recorded 2026-11-09 20:21 UTC
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.asiainfo.eu/cloudbss | product |
| https://github.com/trevorkaon/vulnerability-secur… | third-party-advisory |
| https://www.cve.org/CVERecord?id=CVE-2026-125298 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | vdb-entry |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AsiaInfo International | Business Support System |
Affected:
9.2.0 , < 9.2.41
(custom)
Unaffected: 9.2.41 |
|
| AsiaInfo International | aether-menu |
Affected:
2.2.1 , < 2.2.7
(custom)
Unaffected: 2.2.7 |
Date Public
2026-09-20 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Business Support System",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "9.2.41",
"status": "affected",
"version": "9.2.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "9.2.41"
}
]
},
{
"defaultStatus": "unknown",
"product": "aether-menu",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "2.2.7",
"status": "affected",
"version": "2.2.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.2.7"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Trevor Kaon, security researcher (ORCID 0009-0007-0562-1331)"
}
],
"datePublic": "2026-09-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-125298",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T20:21:49.590365Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347 Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T21:53:59.621Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"product"
],
"url": "https://www.asiainfo.eu/cloudbss"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125298.md"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-125298"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-03.json"
}
],
"title": "AsiaInfo Business Support System (BSS) Missing JWT Signature Verification",
"x_generator": {
"engine": "VINCE-NT 1.15.4+build.174"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-125298",
"datePublished": "2026-11-10T21:53:59.621Z",
"dateReserved": "2026-11-09T19:53:55.060Z",
"dateUpdated": "2026-11-10T21:53:59.621Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125297 (GCVE-0-2026-125297)
Vulnerability from nvd – Published: 2026-11-10 21:53 – Updated: 2026-11-10 21:53
VLAI
EPSS
VEX
Title
AsiaInfo Business Support System (BSS) Missing Authentication
Summary
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · cisa-cg (v2.0.3)
Decision recorded 2026-11-09 20:00 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.asiainfo.eu/cloudbss | product |
| https://github.com/trevorkaon/vulnerability-secur… | third-party-advisory |
| https://www.cve.org/CVERecord?id=CVE-2026-125297 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | third-party-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AsiaInfo International | Business Support System |
Affected:
9.2.0 , < 9.2.41
(custom)
Unaffected: 9.2.41 |
|
| AsiaInfo International | aether-menu |
Affected:
2.2.1 , < 2.2.7
(custom)
Unaffected: 2.2.7 |
Date Public
2026-09-11 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Business Support System",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "9.2.41",
"status": "affected",
"version": "9.2.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "9.2.41"
}
]
},
{
"defaultStatus": "unknown",
"product": "aether-menu",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "2.2.7",
"status": "affected",
"version": "2.2.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.2.7"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Trevor Kaon, security researcher (ORCID 0009-0007-0562-1331)"
}
],
"datePublic": "2026-09-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API \u0027/bss/sysmgnt/api/\u0027. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-125297",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T20:00:42.005682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T21:53:46.111Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"product"
],
"url": "https://www.asiainfo.eu/cloudbss"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125297.md"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-125297"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-03.json"
}
],
"title": "AsiaInfo Business Support System (BSS) Missing Authentication",
"x_generator": {
"engine": "VINCE-NT 1.15.4+build.174"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-125297",
"datePublished": "2026-11-10T21:53:46.111Z",
"dateReserved": "2026-11-09T19:53:37.202Z",
"dateUpdated": "2026-11-10T21:53:46.111Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125298 (GCVE-0-2026-125298)
Vulnerability from cvelistv5 – Published: 2026-11-10 21:53 – Updated: 2026-11-10 21:53
VLAI
EPSS
VEX
Title
AsiaInfo Business Support System (BSS) Missing JWT Signature Verification
Summary
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · cisa-cg (v2.0.3)
Decision recorded 2026-11-09 20:21 UTC
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.asiainfo.eu/cloudbss | product |
| https://github.com/trevorkaon/vulnerability-secur… | third-party-advisory |
| https://www.cve.org/CVERecord?id=CVE-2026-125298 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | vdb-entry |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AsiaInfo International | Business Support System |
Affected:
9.2.0 , < 9.2.41
(custom)
Unaffected: 9.2.41 |
|
| AsiaInfo International | aether-menu |
Affected:
2.2.1 , < 2.2.7
(custom)
Unaffected: 2.2.7 |
Date Public
2026-09-20 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Business Support System",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "9.2.41",
"status": "affected",
"version": "9.2.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "9.2.41"
}
]
},
{
"defaultStatus": "unknown",
"product": "aether-menu",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "2.2.7",
"status": "affected",
"version": "2.2.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.2.7"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Trevor Kaon, security researcher (ORCID 0009-0007-0562-1331)"
}
],
"datePublic": "2026-09-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-125298",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T20:21:49.590365Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347 Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T21:53:59.621Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"product"
],
"url": "https://www.asiainfo.eu/cloudbss"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125298.md"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-125298"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-03.json"
}
],
"title": "AsiaInfo Business Support System (BSS) Missing JWT Signature Verification",
"x_generator": {
"engine": "VINCE-NT 1.15.4+build.174"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-125298",
"datePublished": "2026-11-10T21:53:59.621Z",
"dateReserved": "2026-11-09T19:53:55.060Z",
"dateUpdated": "2026-11-10T21:53:59.621Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125297 (GCVE-0-2026-125297)
Vulnerability from cvelistv5 – Published: 2026-11-10 21:53 – Updated: 2026-11-10 21:53
VLAI
EPSS
VEX
Title
AsiaInfo Business Support System (BSS) Missing Authentication
Summary
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · cisa-cg (v2.0.3)
Decision recorded 2026-11-09 20:00 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.asiainfo.eu/cloudbss | product |
| https://github.com/trevorkaon/vulnerability-secur… | third-party-advisory |
| https://www.cve.org/CVERecord?id=CVE-2026-125297 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | third-party-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| AsiaInfo International | Business Support System |
Affected:
9.2.0 , < 9.2.41
(custom)
Unaffected: 9.2.41 |
|
| AsiaInfo International | aether-menu |
Affected:
2.2.1 , < 2.2.7
(custom)
Unaffected: 2.2.7 |
Date Public
2026-09-11 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Business Support System",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "9.2.41",
"status": "affected",
"version": "9.2.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "9.2.41"
}
]
},
{
"defaultStatus": "unknown",
"product": "aether-menu",
"vendor": "AsiaInfo International",
"versions": [
{
"lessThan": "2.2.7",
"status": "affected",
"version": "2.2.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.2.7"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Trevor Kaon, security researcher (ORCID 0009-0007-0562-1331)"
}
],
"datePublic": "2026-09-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API \u0027/bss/sysmgnt/api/\u0027. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accounts, and perform other administrative actions. Fixed in 9.2.41."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-125297",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T20:00:42.005682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T21:53:46.111Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"product"
],
"url": "https://www.asiainfo.eu/cloudbss"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125297.md"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-125297"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-03.json"
}
],
"title": "AsiaInfo Business Support System (BSS) Missing Authentication",
"x_generator": {
"engine": "VINCE-NT 1.15.4+build.174"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-125297",
"datePublished": "2026-11-10T21:53:46.111Z",
"dateReserved": "2026-11-09T19:53:37.202Z",
"dateUpdated": "2026-11-10T21:53:46.111Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}