CVE-2025-24607

Summary

CVE-2025-24607 is a Missing Authorization vulnerability affecting Northern Beaches Websites' IdeaPush software. This issue arises due to incorrectly configured access control security levels in IdeaPush, enabling unauthorized access. The vulnerability exists in versions from n/a through 8.71, potentially exposing systems to exploitation by attackers. Successful exploitation could result in unauthorized modification, disclosure, or deletion of data, making it essential for affected organizations to apply the necessary patches promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.