PT-2026-2486 · Hubert Imoveis E Administracao Ltda · Hub V2.0

Published 2026-01-13 · Updated 2026-02-13 · CVE-2025-65784

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hubert Imoveis e Administracao Ltda Hub v2.0 version 1.27.3

Description The software contains insecure permissions that allow authenticated attackers with low-level privileges to access other users' information through a specially crafted API request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-65784

Affected Products

Hub V2.0

References · 8

• 🔥 https://github.com/carlos-artmann/vulnerability-research/tree/main/CVE-2025-65784 · Exploit
• https://osv.dev/vulnerability/CVE-2025-65784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65784 · Security Note
• http://hubert.com · Note
• https://twitter.com/CVEnew/status/2011120647359910283 · Twitter Post
• https://t.me/cveNotify/151996 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2011149899614630375 · Twitter Post
• http://hub.com · Note