CVE-2025-10374

5.5 mediumEPSS 0.4%

Medium (5.5). EPSS 0.4% chance of exploitation in the next 30 days.

A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-285
Published: 2025-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://vuldb.com/?ctiid.323788
https://vuldb.com/?id.323788
https://vuldb.com/?submit.639092
https://www.yuque.com/hongzh0/tx13c7/lgb05p6ar7ybugcz

Check your stack JSON