CVE-2025-40664: Tcman Gim

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser.

Affected products

• Tcman Gim: version 11.0 only

Published 2025-05-26. Last modified 2026-06-17.