CVE-2025-13348

An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.

• CWE-862

• https://www.asus.com/security-advisory/

Published

Feb 2, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13342The Frontend Admin by DynamiApps plugin for WordPress is vul…9.8
• CVE-2025-13343A security flaw has been discovered in SourceCodester Interv…5.4
• CVE-2025-13344A weakness has been identified in SourceCodester Train Stati…9.8
• CVE-2025-13345A security vulnerability has been detected in SourceCodester…8.8
• CVE-2025-13346A vulnerability was detected in SourceCodester Train Station…8.8
• CVE-2025-13347A flaw has been found in SourceCodester Train Station Ticket…8.8
• CVE-2025-13349A vulnerability has been found in SourceCodester Student Gra…5.4
• CVE-2025-1335A vulnerability, which was classified as problematic, was fo…8.1
• CVE-2025-13350Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage colle…7.1
• CVE-2025-13352Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub…3
• CVE-2025-13353In gokey versions <0.2.0, a flaw in the seed decryption log…5.5
• CVE-2025-13354The Tag, Category, and Taxonomy Manager – AI Autotagger with…4.3