{"id":"CVE-2025-54086","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-54086","generatedAt":"2026-10-28T00:08:04.294Z","title":"CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10.","description":"CVE-2025-54086 is an excess permissions vulnerability in the\nWarehouse component of Absolute Secure Access prior to version 14.10. Attackers\nwith access to the local file system can read the Java keystore file. The\nattack complexity is low, there are no attack requirements, the privileges\nrequired are low and no user interaction is required. Impact to confidentiality\nis low, there is no impact to integrity or availability.","published":"2025-10-02T20:15:33.000Z","lastModified":"2026-10-12T15:10:00.000Z","status":"Analyzed","sourceIdentifier":"SecurityResponse@netmotionsoftware.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-276"],"affected":["absolute/secure access"],"epss":{"score":0.00179,"percentile":0.07453,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54086","tags":["Vendor Advisory"],"source":"SecurityResponse@netmotionsoftware.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-54086","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}