CVE-2025-26733
CVSS 3.1 Score 8.2 of 10 (high)
Details
Published Mar 27, 2025
Updated: Mar 28, 2025
CWE ID 862
Summary
CVE-2025-26733 is a critical authorization vulnerability affecting the Shinetheme Traveler software. The flaw permits unauthorized users to gain access to restricted functions within the application, putting sensitive data at risk. Traveler versions from n/a up to 3.1.8 have been identified as being susceptible to this issue. Organizations using Traveler are strongly urged to apply the necessary patches to mitigate the threat. Failure to address this vulnerability could result in potential data breaches and unintended system modifications.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.