CVE-2025-55261 - Vulnerability Analysis

Overview

HCL Aftermarket DPC contains a broken access control vulnerability caused by missing functional level access control, letting attackers escalate privileges and compromise data integrity and confidentiality, exploit requires no special conditions.

Severity & Score

Impact

Attackers can escalate privileges, steal, and manipulate data, potentially compromising the entire application.

Mitigation

Update to the latest version with proper access control implemented.

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 26, 2026

🟠 CVE-2025-55261 - High (8.1) HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-55261/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner