Pentest Advisories
Our latest advisories
Take a look at the latest advisories from the cybersecurity consultants at Pentest.
CVE
Impact
Researcher
Date
Product
Additional info
CVE-2025-62730
Privilege Escalation via Incorrect Authorisation
Łukasz Jaworski
Nov 2025
SOPlanning
CVE-2025-62294
Predictable Generation of Password Recovery Token
Łukasz Jaworski
Nov 2025
SOPlanning
CVE-2025-8449
Denial of Service
Scott Laurie
Aug 2025
Schneider Electric – EcoStruxureTM Building Operation Enterprise Server, EcoStruxureTM Enterprise Server, EcoStruxureTM Workstation
CVE-2025-8448
Unauthorized access to sensitive credential data
Scott Laurie
August 2025
Schneider Electric – EcoStruxureTM Building Operation Enterprise Server, EcoStruxureTM Enterprise Server, EcoStruxureTM Workstation
CVE-2022-29840
Server-Side Request Forgery
Sam Thomas
June 2023
Western Digital MyCloud PR4100
CVE-2021-27980
Authentication Bypass
Paul Ritchie
May 2021
Fedena School Management Software
CVE-2021-27976
Broken Access Controls
Chadwick Jam
May 2021
Fedena School Management Software