CVE-2025-30816

Summary

CVE-2025-30816 represents a Cross-Site Request Forgery (CSRF) vulnerability discovered in the publish post email notification feature of certain Nks software versions. Affecting releases from n/a to 1.0.2.3, this issue enables attackers to execute unwarranted actions on a user's behalf due to insufficient input validation. By tricking users into clicking a malicious link, attackers can perform actions such as modifying or deleting content, leading to potential data loss or unauthorized access. Organizations using the affected software are advised to update to the latest version or apply appropriate security measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.