CVE-2025-10086

2.1 lowEPSS 0.3%

Low (2.1) in fuyang lipengjun platform. EPSS 0.3% chance of exploitation in the next 30 days.

A weakness has been identified in fuyang_lipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Affects another part than CVE-2025-9936.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-285
Published: 2025-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fuyang_lipengjun:platform

References

https://vuldb.com/?ctiid.323042
https://vuldb.com/?id.323042
https://vuldb.com/?submit.644661
https://www.cnblogs.com/aibot/p/19063427

Check your stack JSON