CVE-2025-30235: Securenvoy Securaccess

Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.

Affected products

• Securenvoy Securaccess: before 9.4.515 (fixed in 9.4.515)

Published 2025-03-19. Last modified 2026-06-17.