CVE-2025-26961

Summary

CVE-2025-26961 is a critical security vulnerability affecting the NotFound Fresh Framework, versions from n/a to 1.70.0. This issue involves a Missing Authorization flaw that permits unauthorized access to functionality that is not adequately restricted by Access Control Lists (ACLs). As a result, attackers can bypass necessary authorization checks and execute unintended actions within the affected system. This vulnerability highlights the importance of implementing proper access controls and regularly updating software to ensure the security of applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.