Critical severity · published Feb 19, 2026
CVE-2025-15586
OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authentication bypass without…
10.0
CVSS
0.5%
EPSS
No
On KEV
Description
OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authentication bypass without knowledge of the victim account's password.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OG
OGP-Website · OpenGamePanel
through 52f865a4fba763594453068acf8fa9e3fc38d663 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15586
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15586
github.com
https://github.com/OpenGamePanel/OGP-Website/commit/52f865a4fba763594453068acf8fa9e3fc38d663
github.com
https://github.com/OpenGamePanel/OGP-Website/pull/644
projectblack.io
https://projectblack.io/blog/vibe-hacking-open-game-panel-rce/#vul-01-type-juggling-authentication-bypass