CVE-2025-50325CWE-693

CVE-2025-50325

Medium · published July 23, 2026

CVSS v3.1
5.4
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00505 · 42.3th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-07-23T01:17Z
References (3)
https://en.bandisoft.com/bandizip/help/zone-identifier/ · [email protected]https://en.bandisoft.com/bandizip/history/ · [email protected]https://github.com/OV-0-VO/Public-references/blob/main/CVE-2025-50325.md · [email protected]
EPSS history
Timeline
  • 22 JUL 00:00Z
    BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability
    cvelistv5