Is CVE-2025-10014 actively exploited?

No active exploitation of CVE-2025-10014 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-10014 be exploited remotely?

Yes. CVE-2025-10014 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-10014?

CVE-2025-10014 has a CVSS score of 3.1 (LOW).

HOME VULNERABILITIESCVE-2025-10014

LOW

CVE-2025-10014

CWE-266Published: September 5, 2025· Updated: Jun 17, 2026

3.1

CVSS v3.1

Official Description

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is said to be difficult. The exploit has been published and may be used. It is required to know the RSA-encrypted password of the attacked user account.

NVD Source

Technical Analysis

CVE-2025-10014 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.