SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-04-29 17:43 UTC
Importiert: 2026-05-17 21:16 UTC
Quelle-ID: full_disc
uid_hash: 594f10f565ea0c97cc1f6abc81891f9a87ecb9e00dec76e8e13b680452a3f0a8

Full Disclosure

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 29 SEC Consult Vulnerability Lab Security Advisory < 20260423-0 >

=======================================================================

          title: DLL Hijacking

        product: EfficientLab Controlio (cloud-based employee monitoring service)

vulnerable version: <1.3.95

fixed version: 1.3.95

CVE number: CVE-2025-10549

impact: High

       homepage:https://controlio.net...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2025-10549

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss