CVE-2025-1886: Sage 200 Spain

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

Affected products

• Sage Sage 200 Spain: version 2025.35.000 only

Published 2025-03-07. Last modified 2026-06-17.