Vulnerability · Published Jan 20, 2026 · Assigned by SRA

CVE-2025-58742Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture

High 8.5

In plain English

A high-severity security flaw in ImageDirector Capture from Milner. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 4.0)8.5High

Exploit odds (30 days)0.2%top 92.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Affected products (as reported)

Vendor	Product	Versions
Milner	ImageDirector Capture	7.0.9 – before 7.6.3.25808

Weakness: CWE-522, CWE-923 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H

References

https://sra.io/advisories third-party-advisory