CVE-2025-59116 - CVE House
Back to Database
Status published Medium CVE-2025-59116

User enumeration in Windu CMS

Vulnerability Description

Windu CMS is vulnerable to User Enumeration. This issue occurs during logon, where a difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59116

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Karol Czubernat

References

More from JCD

View All →
CVE-2025-59117
Multiple Stored XSS in Windu CMS
Medium 4.8
CVE-2025-59115
Stored XSS in Windu CMS
Medium 5.3
CVE-2025-59114
Cross-Site Request Forgery in Windu CMS
Medium 5.1
CVE-2025-59113
Bruteforce Protection Bypass in Windu CMS
Medium 6.9
CVE-2025-59112
Cross-Site Request Forgery in Windu CMS
Medium 5.1

Affected Vendor

Affected Software

Windu CMS
Vulnerable Versions:
0

Timeline

Official Publish: November 18th, 2025
Last Modified: December 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-204

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.