CVE-2025-26741
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 15, 2025
CWE ID 862
Summary
CVE-2025-26741 is a Missing Authorization vulnerability affecting Email Notifications for Updates from AWEOS GmbH. This issue enables Privilege Escalation, allowing unauthorized users to access higher levels of system functionality. Specific versions of the Email Notifications for Updates software, from n/a through 1.1.6, are vulnerable to this exploit. The lack of proper authorization checks exposes systems to potential attacks, making it crucial for affected users to update their software promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.