CVE-2025-67796
📛 CVE Title
CVE-2025-67796
Description
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- mitre
- CVSS severity
- high
- CVSS score
- 8.1 / 10
- CVSS vector
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N- Effective score
- 8.1 / 10 HIGH source: CNA overview
- CWE(s)
- —
- Reserved
- 2025-12-12
- Published
- 2026-05-04 02:00 UTC
- Last updated
- 2026-05-05 17:06 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/67xxx/CVE-2025-67796.json
- Linked Threat
- CVE-2025-67796 — CVE-2025-67796
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-05-04 20:16:16 UTC
- NVD last modified
- 2026-05-07 15:53:49 UTC
- NVD CVSS v3.1
- 8.1 / 10 HIGH source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
- NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N- Exploitability subscore
- 2.8 / 10
- Impact subscore
- 5.2 / 10
- EPSS score
- 0.0003 (probability of exploitation in next 30 days)
- EPSS percentile
- 8.95% vs all CVEs — higher = more likely to be exploited, as of 2026-05-25
NVD-assigned CWE(s):
CWE-284
(differs from the CNA list above)
NVD / KEV / EPSS data refreshed 2026-05-25 23:28 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2025-209635 - Assigner
- mitre
- Published
- May 4, 2026, 12:00:00 AM
- Updated
- May 5, 2026, 3:06:54 PM
- EUVD base score (CVSS 3.1)
-
8.1 / 10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - EUVD-reported EPSS
- 0.0300
- Vendors
- n/a
- Products
-
n/a (n/a)
ENISA description: IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6.
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| n/a | n/a |
n/a (affected)
|
— |
Vendor references (2)
References embedded in the original CVE record by the assigning CNA.
MITRE references (1) cveawg.mitre.org
Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.
Web references (4)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://gitlab.com/ikus-soft/rdiffweb tenable:gitlab.com
- https://nvd.nist.gov/vuln/detail/CVE-2025-67796 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2025-67796 tenable:www.cve.org
- https://www.first.org/epss/ tenable:www.first.org
NVD-tagged references (2)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
- https://gitlab.com/ikus-soft/rdiffweb cve@mitre.org
- https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02 cve@mitre.org
Remediations (16)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:blog.qualys.com
As cybersecurity threats evolve, Microsoft's October 2025 Patch Tuesday delivers one of the most comprehensive security updates of the year. Here's a quick breakdown of what you need to know.
2026-05-23 17:51 UTC -
web:fieldeffect.com
Microsoft's October 2025 Patch Tuesday fixes 175 vulnerabilities, including three zero-days under active exploitation and eight critical flaws requiring urgent patching.
2026-05-23 17:51 UTC -
web:isc.sans.edu
Macs are affected as well, but a patch is currently only available for Windows. CVE - 2025 -49719: This vulnerability has already been made public. It does allow for information disclosure on a Microsoft SQL Server. To patch , you must patch the OLE DB Driver. CVE - 2025 -49717: Exploitation is considered less likely for this vulnerability.
2026-05-23 17:51 UTC -
web:petri.com
Windows Aug 13, 2025 August 2025 Patch Tuesday Updates Fix 107 Vulnerabilities Microsoft patches critical flaws and rolls out new Windows features in August 2025 update.
2026-05-23 17:51 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-05-23 17:51 UTC -
web:thecyberexpress.com
Microsoft Patch Tuesday July 2025 was the busiest since January, with 130 vulnerabilities fixed - including 17 high-risk ones.
2026-05-23 17:51 UTC -
web:www.cisa.gov
. For more information see MAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities and CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities. Update (07/31/ 2025 ): CISA has updated this alert to provide clarification on antivirus and endpoint detection and response (EDR) solutions, and details regarding mitigations related to the IIS server. Update (07 ...
2026-05-23 17:51 UTC -
web:www.forbes.com
Microsoft has confirmed that SharePoint Server is under mass global attack. Breaking: An emergency patch has now been released — update immediately.
2026-05-23 17:51 UTC -
web:www.pdq.com
August's cyber news is heating up for all the wrong reasons, but Microsoft is here to cool things down with critical Patch Tuesday fixes and updates.
2026-05-23 17:51 UTC -
web:www.virustotal.com
Streamline your investigations with Google Threat Intelligence Agentic and the new Dark Web (DDW) module. Perform hunting and pivoting across forums using natural language or specific modifiers. Bridge threat actor identities and map global operations easy.
2026-05-23 17:51 UTC -
web:blog.talosintelligence.com
Microsoft has released its monthly security update for August 2025 , which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as "critical".
2026-06-03 07:49 UTC -
web:cybersecuritynews.com
Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.
2026-06-03 07:49 UTC -
web:dbugs.ptsecurity.com
Details on CVE-2025-67796 : Rdiffweb. Includes CVSS score, affected versions, and references.
2026-06-03 07:49 UTC -
web:mashable.com
Microsoft has issued an emergency fix in its SharePoint software after hackers began exploiting a vulnerability to carry out widespread cyberattacks. On Saturday, the company issued an alert ...
2026-06-03 07:49 UTC -
web:nvd.nist.gov
The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...
2026-06-03 07:49 UTC -
web:thehackernews.com
Google patched 124 Android flaws in June 2026, including exploited CVE - 2025 -48595, reducing privilege-escalation risks.
2026-06-03 07:49 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2025-67796.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-67796",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-05T15:06:50.501564Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-05T15:06:54.781Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-04T18:49:37.072Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://gitlab.com/ikus-soft/rdiffweb"
},
{
"url": "https://gitlab.com/ikus-soft/rdiffweb#2106-2025-10-02"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2025-67796",
"datePublished": "2026-05-04T00:00:00.000Z",
"dateReserved": "2025-12-12T00:00:00.000Z",
"dateUpdated": "2026-05-05T15:06:54.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}