CVE-2025-9936CWE-266CWE-285

fuyang_lipengjun platform queryAll AdController improper authorization

Medium · published September 3, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00379 · 30.7th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-285 · Improper Authorization
Published
2025-09-03T23:02Z
EPSS history
Timeline
  • 03 SEP 23:02Z
    fuyang_lipengjun platform queryAll AdController improper authorization
    cvelistv5