CVE-2025-27254: Ge Vernova Enervista Ur Setup

High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.  The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.

Affected products

• Ge Vernova Enervista Ur Setup: version 8.42 only

Published 2025-03-10. Last modified 2026-06-17.