CVE-2025-25760

Summary

CVE-2025-25760 is a Server-Side Request Forgery (SSRF) vulnerability affecting the admin_webgather.php component in SUCMS v1.0. An attacker can exploit this flaw by crafting a malicious GET request, which, upon processing by the server, allows the attacker to gain unauthorized access to internal data and services. This vulnerability poses a significant risk as it enables an attacker to bypass access controls and potentially gain sensitive information or perform unauthorized actions. It is crucial for SUCMS v1.0 users to apply the necessary patches or updates to mitigate this vulnerability and secure their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.