Black Friday60% off BLACKFRIDAY2026
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2025-51586

3.7
CVSSlow
Exploitable remotely over the internet · no authentication required.
Description

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Updated Nov 7, 2026View on NVD →
S4E scanner
mediumMisconfiguration~10 seconds

CVE-2025-51586 Scanner

CVE-2025-51586 Scanner - Information Disclosure vulnerability in PrestaShop

Used 2.7k times · 4.2k assets checked · domain, subdomain, ipv4

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →