PT-2025-54227 · Inmusic Brands · Engine Dj

Brad Isbell · CVE-2025-66723 · Published 2025-12-30 · Updated 2026-01-05

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions inMusic Brands Engine DJ version 4.3.0

Description Engine DJ version 4.3.0 is affected by an issue with insecure permissions. An exposed HTTP service within the Remote Library feature allows attackers to access all files and network paths.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-66723

Affected Products

Engine Dj

References · 9

• 🔥 https://github.com/audiopump/cve-2025-66723 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-66723 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66723 · Vendor Advisory
• https://inmusicbrands.com · Note
• https://t.me/cveNotify/147532 · Telegram Post
• https://t.me/cveNotify/147759 · Telegram Post
• http://inmusic.com · Note
• https://twitter.com/CVEnew/status/2006861549378347441 · Twitter Post
• https://t.me/cveNotify/147724 · Telegram Post