PT-2026-33742 · Fudo Security · Fudo Enterprise

Published 2026-04-20 · Updated 2026-04-20 · CVE-2025-13480

Mitre

CVSS v4.0

5.1

Medium

AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints. This includes sensitive information such as system logs and parts of system configuration settings. This vulnerability has been fixed in version 5.6.3

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-13480

Affected Products

Fudo Enterprise

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13480 · Security Note
• https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf · Note
• https://fudosecurity.com/product/enterprise · Note
• https://cert.pl/en/posts/2026/04/CVE-2025-13480 · Note