CVE-2025-10352: Melis Technology Melis Platform

Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

Affected products

• Melis Technology Melis Platform: before 5.3.11 (fixed in 5.3.11)

Published 2025-10-08. Last modified 2026-10-08.