CVE-2025-10676: fuyang_lipengjun platform queryAll BrandController improper authorization
A weakness has been identified in fuyanglipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10676?
CVE-2025-10676 has been classified with a significant severity due to its potential for improper authorization and remote exploitation.
How do I fix CVE-2025-10676?
To fix CVE-2025-10676, ensure to apply the latest security patches provided by the fuyang_lipengjun platform vendor.
What type of vulnerability is CVE-2025-10676?
CVE-2025-10676 is identified as an improper authorization vulnerability affecting the BrandController function.
Can CVE-2025-10676 be exploited remotely?
Yes, CVE-2025-10676 can be exploited remotely by an attacker who manipulates the BrandController function.
What software is affected by CVE-2025-10676?
The affected software for CVE-2025-10676 is the fuyang_lipengjun platform version 1.0.