CVE-2025-10676

2.1 lowEPSS 0.4%

Low (2.1) in fuyang lipengjun platform. EPSS 0.4% chance of exploitation in the next 30 days.

A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-285
Published: 2025-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fuyang_lipengjun:platform

References

https://vuldb.com/?ctiid.324797
https://vuldb.com/?id.324797
https://vuldb.com/?submit.653344
https://www.cnblogs.com/aibot/p/19063431
https://vuldb.com/?submit.653344

Check your stack JSON