Live › vulnerability › CVE-2025-13050
A broken function-level authorization check lets a logged-in user execute poller commands that should be restricted to administrators after a restart. An attacker with a valid account can trigger these commands, which the sources do not say reach a shell.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
This page as .md · .json · in your agent: get_signal("CVE-2025-13050")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.