CVE-2025-42601: Meon Kyc Solutions

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter leading to bypassing the Captcha verification mechanism.

Affected products

• Meon Kyc Solutions: version 1.1 only

Published 2025-04-23. Last modified 2026-06-17.