Vulnerability Database

296,676

Total vulnerabilities in the database

CVE-2025-10352

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

Published: Oct 8, 2025
Updated: Oct 10, 2025
CVE: CVE-2025-10352
GHSA: GHSA-p3vc-g9f9-mgw4
Severity: Critical
Exploit:

No technical information available.

CWEs:

CWE-862

Affected Software
References

Software	From	Fixed in
melisplatform / melis-core	-	5.3.11

https://github.com/ivansmc00/CVE-2025-10352-POC
https://github.com/melisplatform/melis-core/commit/e938dd14e108b921e6a399b35976dfb429c41df5
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platform

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo