CVE-2025-0836 - XProtect MIP API Missing Authorization

CVE-2025-0836 - XProtect MIP API Missing Authorization

CVE ID : CVE-2025-0836 Published : Dec. 16, 2025, 11:15 a.m. | 36 minutes ago Description : Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API. Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Dec. 16, 2025

Source: Telegram CVE Monitor