CVE-2025-54320: Ascertia Signinghub

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.

Affected products

• Ascertia Signinghub: up to and including 8.6.8

Published 2025-11-18. Last modified 2026-06-17.