CVE-2025-56221

CVE-2025-56221 is a critical vulnerability affecting SigningHub v8.6.8, stemming from a lack of rate limiting in its login mechanism. This allows unauthenticated attackers to bypass authentication through brute-force attacks. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.