CVE-2025-54768: An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The…

PriorityP433medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

3.98%

89.2th percentile

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
xorux	lpar2rrd	<= 8.04	—
xorux	lpar2rrd	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.