CVE-2025-22681

Summary

CVE-2025-22681 is a missing authorization vulnerability affecting Xfinity Soft Content Cloner. It allows unauthorized access to functionality or data due to incorrectly configured access control security levels. Versions from n/a through 1.0.1 of Content Cloner are impacted by this issue. Successful exploitation could result in significant data compromise or unauthorized actions. Users are advised to update their software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.