CVE-2025-0640 - IDOR in Akinsoft's OctoCloud

Back Back to CVE browser

MEDIUM

IDOR in Akinsoft's OctoCloud

Published Sep 2, 2025

4.7

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.

This issue affects OctoCloud: from s1.09.02 before v1.11.01.

Affected products

Vendor Akinsoft Product OctoCloud Default
unaffected
- Version
  s1.09.02
  Status
  affected
  Constraints
  <v1.11.01

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Akinsoft

OctoCloud

unaffected

Version	Status	Constraints
s1.09.02	affected	<v1.11.01

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0203
government-resource
https://www.usom.gov.tr/bildirim/tr-25-0203
government-resourcebroken-link

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0203		government-resource
https://www.usom.gov.tr/bildirim/tr-25-0203		government-resourcebroken-link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TR-CERT

Published Sep 2, 2025

Updated Jun 6, 2026

Reserved Jan 22, 2025

Link CVE-2025-0640

CISA Vulnrichment

Updated Sep 2, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-0640

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-0640