CVE-2025-11581

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

• CWE-862
• CWE-863

• https://github.com/PowerJob/PowerJob/
• https://github.com/PowerJob/PowerJob/issues/1128Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.327903Permissions Required, VDB Entry
• https://vuldb.com/?id.327903Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.662558Third Party Advisory, VDB Entry

Published

Oct 10, 2025

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11576The AI Chatbot Free Models – Customer Support, Live Chat, Vi…4.3
• CVE-2025-11577Clevo’s UEFI firmware update packages, including B10717.exe,…7.6
• CVE-2025-11578A privilege escalation vulnerability was identified in GitHu…7.2
• CVE-2025-11579github.com/nwaples/rardecode versions <=2.1.1 fail to restri…6.5
• CVE-2025-1158A vulnerability was found in ESAFENET CDG 5.6.3.154.205_2025…6.3
• CVE-2025-11580A weakness has been identified in PowerJob up to 5.1.2. This…5.5
• CVE-2025-11582A vulnerability was detected in code-projects Online Job Sea…9.8
• CVE-2025-11583A flaw has been found in code-projects Online Job Search Eng…9.8
• CVE-2025-11584A vulnerability has been found in code-projects Online Job S…9.8
• CVE-2025-11585A vulnerability was found in code-projects Project Monitorin…9.8
• CVE-2025-11586A vulnerability was determined in Tenda AC7 15.03.06.44. Thi…9.8
• CVE-2025-11587The Call Now Button – The #1 Click to Call Button for WordPr…4.3