PT-2025-51251 · Newgen · Newgen Omnidocs

Cbx216 · Published 2025-12-15 · Updated 2025-12-15 · CVE-2025-65742

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Newgen OmniDocs version 11.0

Description An unauthenticated Broken Function Level Authorization (BFLA) exists in Newgen OmniDocs v11.0. This allows attackers to obtain sensitive information and execute a full account takeover by sending a specially crafted API request. The vulnerability occurs due to insufficient authorization checks, enabling unauthorized access to functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-65742

Affected Products

Newgen Omnidocs

References · 6

• 🔥 https://github.com/CBx216/CVE-2025-65742-Newgen-OmniDocs-LDAP-BFLA/blob/main/CVE-2025-65742.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65742 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65742 · Vendor Advisory
• https://twitter.com/CVEnew/status/2000617523411120257 · Twitter Post
• https://newgensoft.com · Note
• https://t.me/CVEtracker/39856 · Telegram Post