CVE-2025-7347CWE-639

IDOR in Dinibh Puzzle's Dinibh Patrol Tracking System

High · published February 10, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

⚡ A crafty user could exploit trusted identifiers to waltz right past authorization checks in the Dinibh Patrol Tracking System! 🔥 Think of this vulnerability like a guest who sneaks into a VIP area by borrowing a trusted friend's access pass without anyone checking the ID — a recipe for chaos! An attacker could gain unauthorized access to sensitive features or data, effectively hijacking control of the system. This could lead to compromised security and abuse of the tracking system's functions, putting sensitive information and operations at serious risk.

Put simply

Think of this vulnerability like a guest who sneaks into a VIP area by borrowing a trusted friend's access pass without anyone checking the ID — a recipe for chaos! This vulnerability allows an attacker to bypass authorization controls through user-controlled keys, enabling actions that should be restricted. Essentially, the system fails to properly validate whether the user has the right permissions based on these identifiers.

What to do

An attacker could gain unauthorized access to sensitive features or data, effectively hijacking control of the system. This could lead to compromised security and abuse of the tracking system's functions, putting sensitive information and operations at serious risk. To remediate this, ensure that strict validation occurs for all user-controlled identifiers. Additionally, consider updating the Dinibh Patrol Tracking System to the latest version and implement robust logging to monitor access patterns. You've got this! Take these steps, and you'll secure your system in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-02-10T14:08Z
EPSS history
Timeline
  • 10 FEB 14:08Z
    IDOR in Dinibh Puzzle's Dinibh Patrol Tracking System
    cvelistv5