CVE-2025-66573

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

Score

CVSS 3.1 7.5 High

Status

Analyzed - disclosure@vulncheck.com

Published

2025-12-04

Last modified

2026-10-18

Weaknesses

CWE-319

Affected products

• Solstice Pod (Mersive)
• Solstice Pod Firmware (Mersive)

References

• https://www.exploit-db.com/exploits/52104
• https://www.mersive.com/
• https://documentation.mersive.com/en/solstice/about-solstice.html
• https://www.vulncheck.com/advisories/solstice-pod-api-session-key-extraction-via-api-endpoint