PT-2026-33742 · Fudo Security · Fudo Enterprise

Published 2026-04-20 · Updated 2026-05-11 · CVE-2025-13480

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fudo Enterprise versions 5.5.0 through 5.6.2

Description Low privileged users can access administrator-only resources due to improperly protected API endpoints. This allows unauthorized access to sensitive information, including system logs and portions of system configuration settings.

Recommendations Update to version 5.6.3.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-13480

Affected Products

Fudo Enterprise

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-13480 · Security Note
• https://t.me/cveNotify/163058 · Telegram Post
• https://cert.pl/en/posts/2026/04/CVE-2025-13480 · Note
• https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf · Note
• https://fudosecurity.com/product/enterprise · Note