VulnSocial

CVE-2025-71056Disclosure

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-290

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-02-23); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-02-23: 1Mentions · 2026-02-24: 1Mentions · 2026-02-27: 1Mentions · 2026-02-28: 1Technical Details · 2026-02-23: 1Technical Details · 2026-02-24: 1Technical Details · 2026-02-27: 1Technical Details · 2026-02-28: 102-2302-2402-2702-28
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-231
General1
2026-02-241
Disclosure1
2026-02-271
Disclosure1
2026-02-281
Disclosure1
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2025-71056 Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authen… https://www.cve.org/CVERecord?id=CVE-2025-71056

    Post summary

    The CVE describes an improper session management flaw that allows session hijacking via IP spoofing in GCOM EPON 1GE ONU, but no PoC, exploit, or patch details are provided.

    00010167
    56.5K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2025-71056 (CVSS:8.1, HIGH) is Awaiting Analysis. Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking a..https://nvd.nist.gov/vuln/detail/CVE-2025-71056 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE‑2025‑71056, noting its high CVSS score and that it stems from improper session management leading to session hijacking, but offers no PoC, exploit, or patch details.

    0000077
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2025-71056 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking a..https://nvd.nist.gov/vuln/detail/CVE-2025-71056 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    A critical session hijacking vulnerability (CVE-2025-71056) has been disclosed for GCOM EPON 1GE ONU, with no PoC, exploit, or patch details provided and no evidence of active exploitation.

    0000023
    173 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2025-71056 Session Hijacking Vulnerability in GCOM EPON 1GE ONU C00R371V00B01 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71056

    Post summary

    The text references a session hijacking vulnerability (CVE-2025-71056) in a GCOM EPON device but provides no further details such as PoC, exploit, patch, or active exploitation.

    0000040
    4.0K followersView on X

Explore more

Back to dashboard