CVE-2025-28128: Mytel Telecom Online Account System

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request.

Affected products

• Mytel Telecom Online Account System: version 1.0 only

Published 2025-04-25. Last modified 2026-06-17.