CVE-2025-8756

A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulnerability is the function preHandle of the file /manage/ of the component com.tduck.cloud.api.web.interceptor.AuthorizationInterceptor. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-266
• CWE-285

• https://github.com/TDuckCloud/tduck-platform/issues/28Exploit, Issue Tracking, Vendor Advisory
• https://github.com/TDuckCloud/tduck-platform/issues/28#issue-3269885235Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.319261Permissions Required, VDB Entry
• https://vuldb.com/?id.319261Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.624188Third Party Advisory, VDB Entry
• https://github.com/TDuckCloud/tduck-platform/issues/28Exploit, Issue Tracking, Vendor Advisory

Published

Aug 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8750A vulnerability has been found in macrozheng mall up to 1.0.…5.4
• CVE-2025-8751A vulnerability was found in Protected Total WebShield Exten…6.1
• CVE-2025-8752A vulnerability was found in wangzhixuan spring-shiro-traini…9.8
• CVE-2025-8753A vulnerability, which was classified as critical, has been …5.4
• CVE-2025-8754Missing Authentication for Critical Function vulnerability i…8.7
• CVE-2025-8755A vulnerability was found in macrozheng mall up to 1.0.3 and…5.5
• CVE-2025-8757A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and c…7
• CVE-2025-8758A vulnerability was found in TRENDnet TEW-822DRE FW103B02. I…7
• CVE-2025-8759A vulnerability was found in TRENDnet TN-200 1.02b02. It has…5.9
• CVE-2025-8760A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 B…9.8
• CVE-2025-8761A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 B…7.7
• CVE-2025-8762A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build …6.8