Is CVE-2025-6526 actively exploited?

No active exploitation of CVE-2025-6526 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-6526 be exploited remotely?

Partially. CVE-2025-6526 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-6526?

CVE-2025-6526 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2025-6526

MEDIUM

CVE-2025-6526

CWE-522Published: June 23, 2025· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component HTTP Server. The manipulation leads to insufficiently protected credentials. The attack can only be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2025-6526 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.3.