CVE-2026-125659

Name of the Vulnerable Software and Affected Versions eMudhra emBridge (affected versions not specified)

Description Missing authorization checks in the FileBrowser API endpoints allow an unauthenticated attacker on the same local area network to perform file system enumeration. The endpoints execute requests using the LocalSystem account without validating the caller's authorization. An attacker can exploit this by sending a malicious webpage to the local HTTPS Web API to enumerate file and directory names and obtain information about the system's directory structure. This issue does not allow access to file contents, file modification, deletion, code execution, or access to cryptographic keys and hardware token PINs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.