PT-2025-18692 · Kunbus · Kunbus Pictory

·

CVE-2025-32011

·

Published

2025-05-01

·

Updated

2025-05-04

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions KUNBUS PiCtory versions 2.5.0 through 2.11.1
Description The issue allows a remote attacker to bypass authentication and gain access due to a path traversal vulnerability. This enables unauthorized access, potentially leading to further exploitation.
Recommendations For versions 2.5.0 through 2.11.1, update to a version that includes a fix for the authentication bypass vulnerability. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-32011

Affected Products

Kunbus Pictory