An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema.
CVE-2025-54561
CVSS base score
4.3 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-284
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
desktopalert pingalert application server
References
- desktopalert.net Product
- desktopalert.net Vendor Advisory