← Back

Vbc Server

vbc_server

Vendor: Bridgetech • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-63214
1Bridgetech
1Vbc Server
Dec 11, 2025
Nov 19, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.
CVE-2025-63211
1Bridgetech
1Vbc Server
Jan 15, 2026
Nov 19, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSet...Show more
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.Show less