Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2025-66723: inMusic Brands Engine DJ 4.3.3 and earlier allows unauthorized access to files and network paths
CVE-2025-66723 · published 10 months ago
Summary
A security issue in inMusic Brands Engine DJ versions 4.3.3 and earlier allows attackers to access sensitive data and potentially exploit the system. This is a significant risk, as it could lead to unauthorized access to your business's files and data. To protect yourself, update to version 4.3.4 or later.
What to do
- Update inmusicbrands engine_dj_desktop to version 4.3.4 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| inmusicbrands | engine_dj_desktop |
>= 3.0.0, < 4.3.4 cpe:2.3:a:inmusicbrands:engine_dj_desktop:*:*:*:*:*:*:*:* |
Original advisory text
inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths.
inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths.
References
- https://github.com/audiopump/cve-2025-66723 Exploit Third Party Advisory
- https://www.inmusicbrands.com/ Product
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-732Incorrect Permission Assignment for Critical Resource
Timeline
Published30 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-66723 · NVD
Track software like this
Free during beta