CVE-2025-40897 - Vulnerability Analysis

Overview

A product contains an access control vulnerability caused by improper enforcement of access restrictions in Threat Intelligence functionality, letting authenticated users with view-only privileges perform administrative actions, exploit requires authenticated view-only user.

Severity & Score

Impact

Authenticated users with view-only privileges can perform administrative actions, potentially altering configurations and affecting availability.

Mitigation

Update to the latest version with proper access control enforcement.

References

• https://security.nozominetworks.com/NN-2026:1-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner