CVE-2025-34155: Tibbo Systems Aggregate Network Manager

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can facilitate user enumeration and increase the likelihood of targeted brute-force or credential-stuffing attacks.

Affected products

• Tibbo Systems Aggregate Network Manager: before 6.40.05 (fixed in 6.40.05)

Published 2025-10-23. Last modified 2026-10-08.