{"id":"CVE-2025-28128","aliases":["EUVD-2025-12503","GHSA-q3v8-fm8w-jqcp"],"status":"published","title":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP...","description":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0043,"percentile":0.3749,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-290"],"published":"2025-04-25T00:00:00Z","modified":"2026-06-17T09:04:34Z","products":[{"vendor":"mytel","product":"telecom_online_account_system"}],"references":[{"url":"https://mytel.com.mm","tags":["Product"]},{"url":"https://gist.github.com/str4ng3r-0x7/3d9d310cb6cc5af39088ef44289ba588#file-cve-2025-28128","tags":["Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-28128"},{"url":"https://github.com/advisories/GHSA-q3v8-fm8w-jqcp"}],"sources":{"cve":[{"id":"CVE-2025-28128","description":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.","status":"published","published":"2025-04-25T00:00:00Z","modified":"2025-04-25T20:25:54.189Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:32:49.824855Z"}],"euvd":[{"id":"EUVD-2025-12503","description":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.","status":"published","published":"2025-04-25T00:00:00Z","modified":"2025-04-25T20:25:54Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T20:52:02.538258Z"}],"ghsa":[{"id":"GHSA-q3v8-fm8w-jqcp","title":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP...","description":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.","status":"published","published":"2025-04-25T21:31:33Z","modified":"2025-04-25T21:31:39Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T15:02:02.261137Z"}],"nvd":[{"id":"CVE-2025-28128","description":"An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.","status":"published","published":"2025-04-25T20:15:39.153Z","modified":"2026-06-17T09:04:34.977Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:11:02.570368Z"}]}}