CVE-2025-24653

Summary

CVE-2025-24653 is a Missing Authorization vulnerability affecting the NotFound Admin and Site Enhancements (ASE) Pro software. The issue arises due to incorrectly configured access control security levels, which enable unauthorized access. This vulnerability allows exploitation of Admin and Site Enhancements (ASE) Pro versions from n/a through 7.6.1.1. Successful exploitation could potentially result in unauthorized access to sensitive information or system functions. It is essential for users to apply the necessary patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.