CVE-2019-25342: Centova Technologies Inc Centova Cast

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeatedly calling the database export API endpoint. Attackers can trigger 100% CPU load by sending multiple concurrent requests to the /api.php endpoint with crafted parameters.

Affected products

• Centova Technologies Inc Centova Cast: version 3.2.12 only

Published 2026-02-12. Last modified 2026-06-17.