CVE-2025-0359

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

• CWE-863

• https://www.axis.com/dam/public/68/08/c5/cve-2025-0359pdf-en-US-466885.pdfVendor Advisory

Published

Mar 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0353The Divi Torque Lite – Best Divi Addon, Extensions, Modules …6.4
• CVE-2025-0354Cross-site scripting vulnerability in NEC Corporation Aterm …4.8
• CVE-2025-0355Missing Authentication for Critical Function vulnerability i…7.5
• CVE-2025-0356NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3…7.2
• CVE-2025-0357The WPBookit plugin for WordPress is vulnerable to arbitrary…9.8
• CVE-2025-0358During an annual penetration test conducted on behalf of Axi…8.8
• CVE-2025-0360During an annual penetration test conducted on behalf of Axi…7.8
• CVE-2025-0361During an annual penetration test conducted on behalf of Axi…5.3
• CVE-2025-0362An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2025-0364BigAntSoft BigAnt Server, up to and including version 5.6.06…9.8
• CVE-2025-0365The Jupiter X Core plugin for WordPress is vulnerable to Dir…6.5
• CVE-2025-0366The Jupiter X Core plugin for WordPress is vulnerable to Loc…8.8