PT-2025-44365 · Acquia · Acquia Dam

Brandon Goodwin + 7 · CVE-2025-9954 · Published 2025-10-29 · Updated 2025-11-03

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acquia DAM versions 0.0.0 through 1.1.4

Description A missing authorization issue exists in Drupal Acquia DAM, allowing for forceful browsing. This allows unauthorized access to resources.

Recommendations Update Acquia DAM to version 1.1.5 or later.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-9954

DRUPAL-CONTRIB-2025-105

GHSA-X957-32V9-M7VG

Affected Products

Acquia Dam

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9954.json · Exploit
• https://osv.dev/vulnerability/GHSA-x957-32v9-m7vg · Vendor Advisory
• https://drupal.org/sa-contrib-2025-105 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9954 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9954 · Vendor Advisory
• https://git.drupalcode.org/project/acquia_dam · Note
• https://reddit.com/r/VulnMatter/comments/1ol36t3/resumen_diario_de_vulnerabilidades_31102025 · Reddit Post
• https://drupal.org/project/acquia_dam · Note
• https://twitter.com/VulmonFeeds/status/1983694299771408712 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1om1lei/resumen_diario_de_vulnerabilidades_01112025 · Reddit Post
• https://twitter.com/CVEnew/status/1983678040358994011 · Twitter Post
• https://t.me/CVEtracker/36146 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1onduhn/resumen_diario_de_vulnerabilidades_03112025 · Reddit Post
• https://t.me/cveNotify/140919 · Telegram Post