CVE-2025-40805

10.0CRITICAL

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitima

Опубликовано: 1/13/2026Обновлено: 1/13/2026
Посмотреть на NVDПосмотреть на MITRE

Описание

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

ИИ-АнализНа базе ИИ

Ссылки