CVE-2025-48027: Mutonufoai Pgina.fork

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver.

Affected products

• Mutonufoai Pgina.fork: up to and including 3.9.9.12

Published 2025-05-15. Last modified 2026-06-17.