CISA advisory reports critical vulnerabilities in Sunbird DCIM dcTrack and Power IQ products (versions 9.2.0 and prior) with CVSS v4 score of 8.4. CVE-2025-66238 allows authentication bypass through alternate paths enabling network traffic redirection. CVE-2025-66237 involves hard-coded credentials allowing database administration and privilege escalation. Affects critical infrastructure sectors including IT and manufacturing worldwide. Successful exploitation could allow unauthorized access and credential theft. Updates available: dcTrack 9.2.3 and Power IQ 9.2.1.