CVE-2025-7706
Last modified
CVE-2025-7706 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-7706?
How severe is CVE-2025-7706?
How do I fix CVE-2025-7706?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-7699An improper access control vulnerability was found in the E…7.1
- CVE-2025-7700A flaw was found in FFmpeg’s ALS audio decoder, where it doe…5.3
- CVE-2025-7702URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7
- CVE-2025-7703Authentication vulnerability in the mobile application（tech.…3.1
- CVE-2025-7704Supermicro BMC Insyde SMASH shell program has a stacked-bas…5.4
- CVE-2025-7705: Active Debug Code vulnerability in ABB Switch Actuator 4 D…8.6
- CVE-2025-7707The llama_index library version 0.12.33 sets the NLTK data d…7.8
- CVE-2025-7708Insertion of Sensitive Information Into Sent Data vulnerabil…6.8
- CVE-2025-7709An integer overflow exists in the FTS5 https://sqlite.org/f…6.9
- CVE-2025-7710The Brave Conversion Engine (PRO) plugin for WordPress is vu…9.8
- CVE-2025-7711The The Classified Listing – Classified ads & Business Direc…5.4
- CVE-2025-7712The Madara - Core plugin for WordPress is vulnerable to arbi…9.1
Are you affected by CVE-2025-7706?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST