CVE-2025-69615: Telekom Account Management Portal

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025-11-03.

Affected products

• Telekom Account Management Portal: up to and including 2025-10-24

Published 2026-03-10. Last modified 2026-06-17.