Is CVE-2025-1029 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-1029 being exploited in the wild.

How severe is CVE-2025-1029?

High severity, with a CVSS score of 7.5, published 18 December 2025.

Which products and versions are affected?

Utarit Information Services Inc. SoliClub 5.2.4 to 5.3.7.

Is there a fix for CVE-2025-1029?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-1029 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-1029?

Check whether you run Utarit Soliclub. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-1029: Utarit SoliClub hard-coded credentials in executable

CVE-2025-1029 · Severity: high · CVSS 7.5 · Published 2025-12-18

Utarit SoliClub, a campus and corporate life management application, contains hard-coded credentials within its executable files. An attacker can extract these sensitive constants to gain unauthorized access to protected data or systems. This could lead to the exposure of sensitive user information or internal service credentials, potentially disrupting operations or compromising user privacy.

Technologies: Utarit Soliclub. Vendors: Utarit.

Quick answers

Is CVE-2025-1029 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-1029 being exploited in the wild.
How severe is CVE-2025-1029?: High severity, with a CVSS score of 7.5, published 18 December 2025.
Which products and versions are affected?: Utarit Information Services Inc. SoliClub 5.2.4 to 5.3.7.
Is there a fix for CVE-2025-1029?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-1029 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-1029?: Check whether you run Utarit Soliclub. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Use of Hard-coded Credentials (CWE-798) vulnerability exists in Utarit SoliClub versions 5.2.4 through 5.3.7. The application stores sensitive constants, such as passwords or cryptographic keys, directly within the compiled executable code. An attacker with access to the application binary can perform static analysis or reverse engineering to retrieve these credentials. Because these credentials are hard-coded, they cannot be easily changed by the end-user and provide a consistent vector for unauthorized access. The vulnerability is exploitable over the network if these credentials are used for remote authentication or data decryption. A fix is available in version 5.3.7.

Affected products

Utarit Information Services Inc. SoliClub 5.2.4 to 5.3.7

Timeline

2025-12-18: advisory: Initial publication by TR-CERT (USOM)
2025-12-18: disclosed: CVE-2025-1029 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.