CVE-2025-26959

Summary

CVE-2025-26959 is a critical vulnerability affecting Quý Lê 91 Administrator Z. This issue involves a missing authorization control, granting attackers the ability to escalate privileges. By exploiting this flaw, unauthorized users can gain administrative access to the affected system, posing a significant risk to data confidentiality and system integrity. The vulnerability exists in versions of Administrator Z from n/a up to and including 2025.03.24. It is essential for organizations using this software to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.