CVE-2025-69274CWE-639

Spectrum broken authorization scheme

Low · published January 12, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

⚠️ A crafty little oversight lets users take a shortcut to elevated privileges! This authorization bypass in Broadcom DX NetOps Spectrum could lead to some surprising escalations. 😮 Think of it like a VIP lounge that accidentally lets anyone slip in through a backdoor — the security wasn't tight enough, so everyone gets a free pass! 🎟️ If exploited, an attacker could gain unauthorized access to sensitive features or data, which could lead to potential misconfigurations or unwanted changes. It's like handing out keys to the castle without checking who’s on the guest list—definitely not ideal!

Put simply

Think of it like a VIP lounge that accidentally lets anyone slip in through a backdoor — the security wasn't tight enough, so everyone gets a free pass! 🎟️ This vulnerability allows users to bypass normal authorization checks through a user-controlled key, resulting in privilege escalation. Specifically, versions 24.3.10 and earlier of DX NetOps Spectrum on Windows and Linux are affected.

What to do

If exploited, an attacker could gain unauthorized access to sensitive features or data, which could lead to potential misconfigurations or unwanted changes. It's like handing out keys to the castle without checking who’s on the guest list—definitely not ideal! To protect your systems, upgrade to a patched version of DX NetOps Spectrum, or at least ensure proper access controls are in place. Regularly audit user privileges to catch any unauthorized access quickly! You've got this! By following these steps, you can secure your environment and keep those backdoors shut! 🛡️

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-01-12T04:42Z
EPSS history
Timeline
  • 12 JAN 04:42Z
    Spectrum broken authorization scheme
    cvelistv5