SI
Product
Signinghub
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 2Low 0
Watch
Add Signinghub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54321 | 9.8 | Nov 18 | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability Affected: through 8.6.8 |
| CVE-2025-56218 | 9.8 | Oct 17 | An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file Affected: through 8.6.8 |
| CVE-2025-56221 | 9.8 | Oct 17 | A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack Affected: through 8.6.8 |
| CVE-2025-56224 | 8.1 | Oct 20 | A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack Affected: through 8.6.8 |
| CVE-2025-56223 | 7.5 | Oct 20 | A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of… Affected: through 8.6.8 |
| CVE-2025-56219 | 7.1 | Oct 20 | Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting Affected: through 8.6.8 |
| CVE-2025-61166 | 6.1 | Apr 6 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL Affected: 8.6.8; 10.0 |
| CVE-2025-54320 | 4.3 | Nov 18 | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability Affected: through 8.6.8 |
Showing 8