CVE-2025-54568

Published: Jul 25, 2025Modified: Jun 17, 2026Deferred

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.2 / Impact: 1.4

Source: MITRE (Secondary)

Description

Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node.

Related CWEs

CWE-684

Incorrect Provision of Specified Functionality

The code does not function according to its published specifications, potentially leading to incorrect usage.

References (2)

http://techdocs.akamai.com/app-api-protector/docs/improved-rate-accounting

Source: cve@mitre.org

https://github.com/geo-chen/Akamai/blob/main/Edge%20Hopping.md

Source: cve@mitre.org

Timeline

No history available yet.