PT-2025-39237 · Unknown · Web Applications

Published 2025-09-24 · Updated 2025-09-29 · CVE-2025-41715

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Web application (affected versions not specified)

Description The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-14826

CVE-2025-41715

Affected Products

Web Applications

References · 12

• https://bdu.fstec.ru/vul/2025-14826 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-41715 · Security Note
• https://t.me/cveNotify/136243 · Telegram Post
• https://twitter.com/fridaysecurity/status/1971006606071693516 · Twitter Post
• https://twitter.com/cracbot/status/1972617402514055404 · Twitter Post
• https://certvde.com/de/advisories/VDE-2025-087 · Note
• https://t.me/CVEtracker/33230 · Telegram Post
• https://twitter.com/CVEnew/status/1970783861131907090 · Twitter Post
• https://twitter.com/CCBalert/status/1971215988986101772 · Twitter Post
• https://twitter.com/CveFindCom/status/1970785182601920541 · Twitter Post
• https://t.me/pentestingnews/68658 · Telegram Post
• https://twitter.com/zoomeye_team/status/1971152380583608352 · Twitter Post