CVE-2025-4596CWE-639

CVE-2025-4596

published January 8, 2026

CVSS

5.3

EPSS

Percentile

22.9

In the wild

Unconfirmed

What it is

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs.

This issue has been fixed in 6.09.01.62 version of ADMX.

The record

Technical detail

CVSS: 5.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00312 · 22.9th percentile
Weakness: CWE-639 · Authorization Bypass Through User-Controlled Key
Published: 2026-01-08T20:15Z

References (1)

https://cert.pl/en/posts/2026/01/CVE-2025-4596 · [email protected]

EPSS history

Timeline

08 JAN 14:58Z
Information disclosure via IDOR in Asseco AMDX
cvelistv5