VulnerabilityAnalyzed

CVE-2025-10086

A weakness has been identified in fuyang_lipengjun platform 1.0.0.

LOW 2.1EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

A weakness has been identified in fuyang_lipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Affects another part than CVE-2025-9936.

CVSS 4.0: 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.32% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-266, CWE-285
Affected: fuyang lipengjun/platform
Source: cna@vuldb.com

References

https://vuldb.com/?ctiid.323042Permissions Required, VDB Entry
https://vuldb.com/?id.323042Third Party Advisory, VDB Entry
https://vuldb.com/?submit.644661Third Party Advisory, VDB Entry
https://www.cnblogs.com/aibot/p/19063427Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.