Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

GhostPool Gauge allows unauthorized access due to incorrect access control settings

CVE-2025-69298 · published 8 months ago
Summary

A security issue in GhostPool Gauge makes it possible for unauthorized users to access data or perform actions they shouldn't be able to. This affects versions of GhostPool Gauge from its initial release up to version 6.56.4. If you're using an affected version, update to the latest patch release to fix the issue.

Original advisory text
Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through <= 6.56.4.
Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through <= 6.56.4.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published20 Feb 2026
Updated3 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-69298 · NVD
Track software like this
Free during beta