CVE-2025-8855: Optimus Software Brokerage Automation

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry Information. This issue affects Brokerage Automation: before 1.1.71.

Affected products

• Optimus Software Brokerage Automation: before 1.1.71 (fixed in 1.1.71)

Published 2025-11-14. Last modified 2026-10-07.