PT-2025-38265 · Wondershare · Wondershare Repairit

Alfredo Oliveira + 1 · Published 2025-04-14 · Updated 2025-10-08 · CVE-2025-10644

Positive Technologies (AI Summary)

CVSS v2.0

9.7

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions Wondershare Repairit (affected versions not specified)

Description The software contains an authentication bypass due to incorrect permission assignment of SAS tokens. This allows unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2026-00202

CVE-2025-10644

ZDI-25-896

Affected Products

Wondershare Repairit

References · 10

• https://osv.dev/vulnerability/CVE-2025-10644 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-896 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10644 · Security Note
• https://bdu.fstec.ru/vul/2026-00202 · Security Note
• https://twitter.com/zeeshankghouri/status/1971173815414923545 · Twitter Post
• https://twitter.com/CveFindCom/status/1968422223787573385 · Twitter Post
• https://twitter.com/offseq/status/1968487887462166650 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1968368227513205137 · Twitter Post
• https://twitter.com/CVEnew/status/1968561201899504089 · Twitter Post
• https://t.me/cveNotify/135936 · Telegram Post