Security Advisory
CVE-2025-57430
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.