CVE-2025-1868

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.

• CWE-200
• CWE-200

• https://www.incibe.es/en/incibe-cert/notices/aviso/information-display-multiple-products-famatech-corp

Published

Mar 3, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1862An arbitrary file upload vulnerability exists in multiple WS…7.2
• CVE-2025-1863Insecure default settings have been found in recorder produc…9.8
• CVE-2025-1864Improper Restriction of Operations within the Bounds of a Me…9.8
• CVE-2025-1865The kernel driver, accessible to low-privileged users, expos…8.5
• CVE-2025-1866Improper Restriction of Operations within the Bounds of a Me…10
• CVE-2025-1867Inconsistent Interpretation of HTTP Requests ('HTTP Request/…10
• CVE-2025-1869SQL injection vulnerability have been found in 101news affec…9.8
• CVE-2025-1870SQL injection vulnerability have been found in 101news affec…9.8
• CVE-2025-1871SQL injection vulnerability have been found in 101news affec…9.8
• CVE-2025-1872SQL injection vulnerability have been found in 101news affec…9.8
• CVE-2025-1873SQL injection vulnerability have been found in 101news affec…9.8
• CVE-2025-1874SQL injection vulnerability have been found in 101news affec…9.8