CVE Intelligence

Ascertia vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ascertia products: 8 record(s), with severity, exploitation and fixes.

Signinghub 8

Exploited only (KEV) →

CVE-2025-61166 Medium · 6.1 CWE-601 Apr 6, 2026
Open Redirect in Ascertia Signinghub
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
CVE-2025-54321 Critical · 9.8 CWE-799 Nov 18, 2025
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset…
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.
CVE-2025-54320 Medium · 4.3 CWE-770 Nov 18, 2025
Allocation of Resources Without Limits or Throttling in Ascertia Signinghub
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.
CVE-2025-56224 High · 8.1 CWE-307 Oct 20, 2025
Improper Restriction of Excessive Authentication Attempts in Ascertia Signinghub
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.
CVE-2025-56223 High · 7.5 CWE-770 Oct 20, 2025
Allocation of Resources Without Limits or Throttling in Ascertia Signinghub
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.
CVE-2025-56219 High · 7.1 CWE-284 Oct 20, 2025
Improper Access Control in Ascertia Signinghub
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.
CVE-2025-56221 Critical · 9.8 CWE-307 Oct 17, 2025
Improper Restriction of Excessive Authentication Attempts in Ascertia Signinghub
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.
CVE-2025-56218 Critical · 9.8 CWE-434 Oct 17, 2025
Unrestricted Upload of File with Dangerous Type in Ascertia Signinghub
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.