CVE-2025-65784 - Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request

Back Back to CVE browser

MEDIUM

Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request

Published Jan 13, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2222
Advisory
https://github.com/carlos-artmann/vulnerability-research/tree/main/CVE-2025-65784
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2222		Advisory
https://github.com/carlos-artmann/vulnerability-research/tree/main/CVE-2025-65784		ExploitThird Party Advisory