7.6
High
CVE-2025-11084 A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a…
Description
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk® DataMosaix™ Private Cloud | Versions not published |
Other CVEs of FactoryTalk® DataMosaix™ Private Cloud
The 4 CVEs of FactoryTalk® DataMosaix™ Private Cloud →
CVE-2026-9292
A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud
8.4
High
CVE-2025-12807
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive…
8.7
High
CVE-2025-11085
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS
8.6
High