CVE-2025-26956
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Mar 27, 2025
Updated: Mar 28, 2025
CWE ID 862
Summary
CVE-2025-26956 denotes a vulnerability affecting the Shinetheme Traveler software, specifically versions from n/a to 3.1.8. This issue involves a Missing Authorization flaw, exposing users to potential unauthorized actions on their systems. Attackers can exploit this weakness to gain unauthorized access and perform functions that exceed their permissions, potentially leading to data theft or system compromise. Users are advised to update their Traveler software to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.