CVE-2025-9982

CVE-2025-9982 describes a critical vulnerability in QuickCMS version 6.8 where sensitive admin credentials are hardcoded and stored in plaintext within a configuration file. This flaw allows attackers with file system access to easily retrieve authentication details, leading to potential privilege escalation. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, posing a significant risk of complete confidentiality compromise. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the inherent ease of exploitation makes it a serious concern for affected QuickCMS installations.