CVE-2025-54321: Ascertia Signinghub

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.

Affected products

• Ascertia Signinghub: up to and including 8.6.8

Published 2025-11-18. Last modified 2026-06-17.