CVE-2025-40806

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack with valid users.

• CWE-204

• https://cert-portal.siemens.com/productcert/html/ssa-356310.htmlVendor Advisory

Published

Dec 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-40800A vulnerability has been identified in COMOS V10.6 (All vers…9.1
• CVE-2025-40801A vulnerability has been identified in COMOS V10.6 (All vers…9.2
• CVE-2025-40802A vulnerability has been identified in RUGGEDCOM RST2428P (6…4.3
• CVE-2025-40803A vulnerability has been identified in RUGGEDCOM RST2428P (6…3.1
• CVE-2025-40804A vulnerability has been identified in SIMATIC Virtualizatio…9.3
• CVE-2025-40805Affected devices do not properly enforce user authentication…10
• CVE-2025-40807A vulnerability has been identified in Gridscale X Prepay (A…5.4
• CVE-2025-40808A vulnerability has been identified in SIPROTEC 5 6MD84 (CP3…6.9
• CVE-2025-40809A vulnerability has been identified in Solid Edge SE2024 (Al…7.8
• CVE-2025-4081Use of entitlement "com.apple.security.cs.disable-library-va…4.8
• CVE-2025-40810A vulnerability has been identified in Solid Edge SE2024 (Al…7.8
• CVE-2025-40811A vulnerability has been identified in Solid Edge SE2024 (Al…7.8