CVE-2025-26201 Information

Description

Credential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges.

Reference

http://greaterwms.com https://github.com/Elymaro/CVE/blob/main/GreaterWMS/CVE-2025-26201.md https://github.com/GreaterWMS/GreaterWMS/issues/383