CVE-2025-26940

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Mar 15, 2025
CWE ID 35

Summary

CVE-2025-26940 is a newly disclosed path traversal vulnerability affecting NotFound Pie Register Premium. This issue permits an unauthenticated attacker to manipulate file paths and potentially gain unauthorized access to sensitive data. The vulnerability affects all versions of Pie Register Premium from n/a through 3.8.3.2. Successful exploitation of this flaw could lead to serious data breaches or system compromises. It is recommended that affected users update to the latest patch as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share