CVE-2025-8590CWE-200

Information Disclosure in AKCE Software's SKSPro

High · published February 3, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

⚡ An unauthorized actor could stroll right through your directory files! This vulnerability in SKSPro allows directory indexing, exposing sensitive information like a bookstore with unlocked shelves. 📚 Think of it as a library where every book is on display, but some contain sensitive secrets. If someone can just walk in and peruse the aisles, it’s a recipe for disaster if they find the wrong book! An attacker could easily access sensitive files, including potentially confidential data, through simple directory browsing. Imagine the chaos if your private customer records or proprietary documents were exposed like a wide-open vault! This could lead to data breaches and severe reputational damage. 🔥

Put simply

Think of it as a library where every book is on display, but some contain sensitive secrets. If someone can just walk in and peruse the aisles, it’s a recipe for disaster if they find the wrong book! The vulnerability allows unauthorized directory indexing, meaning attackers can see the file structure and access files without proper authentication. It poses a significant risk as it exposes sensitive information that should remain confidential.

What to do

An attacker could easily access sensitive files, including potentially confidential data, through simple directory browsing. Imagine the chaos if your private customer records or proprietary documents were exposed like a wide-open vault! This could lead to data breaches and severe reputational damage. 🔥 To secure your SKSPro installation, disable directory indexing immediately. Review your web server configuration and ensure that proper access controls are in place. Regularly audit your file permissions to keep sensitive data locked away. 🛡️ You've got this! Follow these steps to fortify your defenses and keep your sensitive information safe. 🌟

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-02-03T07:19Z
EPSS history
Timeline
  • 03 FEB 07:19Z
    Information Disclosure in AKCE Software's SKSPro
    cvelistv5