Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-10086: Fuyang Lipengjun Platform 1.0.0 Allows Unauthorized Access to Ad Data

CVE-2025-10086 · published 1 year ago

Summary

The Fuyang Lipengjun platform version 1.0.0 has a security weakness that allows hackers to access sensitive ad data without permission. This means that an attacker can gain access to information they shouldn't have, potentially compromising the confidentiality and integrity of your data. You should update to a newer version of the platform to fix this issue and prevent unauthorized access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
fuyang_lipengjun	platform	1.0.0 `cpe:2.3:a:fuyang_lipengjun:platform:1.0.0:::::::*`

Original advisory text

A weakness has been identified in fuyang_lipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Affects another part than CVE-2025-9936.

References

https://vuldb.com/?ctiid.323042 Permissions Required VDB Entry
https://vuldb.com/?id.323042 Third Party Advisory VDB Entry
https://vuldb.com/?submit.644661 Third Party Advisory VDB Entry
https://www.cnblogs.com/aibot/p/19063427 Exploit Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

2.1 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-266Incorrect Privilege Assignment

CWE-285Improper Authorization

Timeline

Published8 Sep 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-10086 · NVD

Track software like this

Free during beta