GenieACS has an unauthenticated access vulnerability via the NBI API endpoint

高危 7.5CVE-2025-56015 · GHSA-2h6j-mhcp-9j9h · Published 07/04/2026 · updated 20/07/2026

要点

Package	Affected versions	Patched versions
genieacs genieacs	`= 1.2.13`	No fix yet
genieacs npm	`= 1.2.13`	No fix yet

In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

NVD description

In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.