CVE-2025-25711

Summary

CVE-2025-25711 is a vulnerability affecting dtp.ae tNexus Airport View version 2.8. An attacker can exploit this issue by manipulating the ProfileID value in a remote request, allowing them to escalate privileges and gain unauthorized access to the [tnexus/rest/admin/updateUser] API endpoint. This vulnerability poses a significant risk for unauthorized system modifications and unintended data exposure. Organizations using the affected version of tNexus Airport View are advised to apply the necessary patches or upgrades as soon as possible to mitigate this privilege escalation threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.