Approved changes feed: RSS · Atom

cpe:2.3:a:ascertia:signinghub:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAscertia (91a87b5e-6aee-59e7-98a6-d21a9506edfa)
ProductSigninghub (f19955f9-48e2-5b08-bcb0-6a0ef14336d0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-56224 vulnerable 2026-06-08 07:33:15.545136 Details available
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.
Published: 2025-10-20T00:00:00.000Z
Updated: 2026-07-05T16:09:34.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56223 vulnerable 2026-06-08 07:33:15.544778 Details available
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.
Published: 2025-10-20T00:00:00.000Z
Updated: 2026-07-05T16:09:30.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56221 vulnerable 2026-06-08 07:33:15.544406 Details available
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-17T19:02:49.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56219 vulnerable 2026-06-08 07:33:15.544182 Details available
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.
Published: 2025-10-20T00:00:00.000Z
Updated: 2026-07-05T16:09:26.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56218 vulnerable 2026-06-08 07:33:15.543926 Details available
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
Published: 2025-10-17T00:00:00.000Z
Updated: 2026-07-05T16:09:22.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54321 vulnerable 2026-06-08 07:33:12.353668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54320 vulnerable 2026-06-08 07:33:12.353122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.