CVE-2025-28232
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Apr 18, 2025
Updated: Apr 22, 2025
CWE ID 284
Summary
CVE-2025-28232 is a newly identified access control vulnerability affecting the HOME.php endpoint in the JMBroadcast JMB0150 Firmware version 1.0. This issue grants unauthenticated attackers the ability to bypass security measures and gain unauthorized access to the Admin panel. By exploiting this weakness, adversaries can potentially execute malicious actions and compromise the targeted system. It is highly recommended that affected organizations apply the necessary patches as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.