CVE-2025-23214: Azukaar Cosmos-Server

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.

Affected products

• Azukaar Cosmos-Server: before 0.17.7 (fixed in 0.17.7)

Published 2025-01-20. Last modified 2026-06-17.