CVE-2025-26942
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2025-26942 is a Missing Authorization vulnerability affecting JetTricks, a software component, from versions n/a through 1.5.1. Hackers can exploit this issue to gain unauthorized access to functionality that is not adequately controlled by Access Control Lists (ACLs). By bypassing the intended access restrictions, attackers may execute unintended actions or gain unauthorized information, potentially leading to significant security consequences. Organizations using JetTricks are advised to update to the latest version or apply relevant patches to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.