PT-2025-46951 · Unknown · Optimus Software Brokerage Automation

Published 2025-11-14 · Updated 2025-11-17 · CVE-2025-8855

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Optimus Software Brokerage Automation versions prior to 1.1.71

Description The software contains flaws related to authentication bypass and authorization. The issue involves exploiting trust in client data and manipulating registry information. A weak password recovery mechanism for forgotten passwords and an authorization bypass through a user-controlled key are present.

Recommendations Update Optimus Software Brokerage Automation to version 1.1.71 or later.

Fix

IDOR

Weakness Enumeration

CWE-640

CWE-639

CWE-302

Related Identifiers

CVE-2025-8855

Affected Products

Optimus Software Brokerage Automation

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-8855 · Security Note
• https://twitter.com/CveTodo/status/1989324525754802656 · Twitter Post
• https://twitter.com/Cyberwarzonecom/status/1990248944589304205 · Twitter Post
• https://twitter.com/CVEnew/status/1989355881713336604 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1989330291421249604 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0396 · Note
• https://t.me/CVEtracker/37326 · Telegram Post
• https://t.me/cveNotify/142775 · Telegram Post