CVE-2025-49082

CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly read other settings. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. The impact to system confidentiality is low, there is no impact to system availability or integrity.

• CWE-276

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49082Vendor Advisory

Published

Jul 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49075Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-49076Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-49077Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh…4.3
• CVE-2025-4908A vulnerability classified as critical has been found in PHP…9.8
• CVE-2025-49080There is a memory management vulnerability in Absolute Secur…7.5
• CVE-2025-49081There is an insufficient input validation vulnerability in t…4.9
• CVE-2025-49083CVE-2025-49083 is a vulnerability in the management console …7.2
• CVE-2025-49084CVE-2025-49084 is a vulnerability in the management console …9.1
• CVE-2025-49087In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discr…3.7
• CVE-2025-49088Pexip Infinity 32.0 through 37.1 before 37.2, in certain con…5.9
• CVE-2025-49089wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via…6.3
• CVE-2025-4909A vulnerability classified as critical was found in SourceCo…7.3