CVE-2025-9265
Last modified
CVE-2025-9265 is a critical-severity vulnerability rated 10/10 on the CVSS scale. A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-9265?
How severe is CVE-2025-9265?
How do I fix CVE-2025-9265?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-9258WebITR developed by Uniong has an Arbitrary File Reading vul…7.1
- CVE-2025-9259WebITR developed by Uniong has an Arbitrary File Reading vul…7.1
- CVE-2025-9260The Fluent Forms – Customizable Contact Forms, Survey, Quiz,…6.5
- CVE-2025-9262A flaw has been found in wong2 mcp-cli 1.13.0. Affected is t…8.1
- CVE-2025-9263A vulnerability has been found in Xuxueli xxl-job up to 3.1.…4.3
- CVE-2025-9264A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Af…5.4
- CVE-2025-9266The Accelerate theme for WordPress is vulnerable to unauthor…4.3
- CVE-2025-9267In Seagate Toolkit on Windows a vulnerability exists in the …7
- CVE-2025-9269A Server-Side Request Forgery (SSRF) vulnerability has been …6.9
- CVE-2025-9273CData API Server MySQL Misconfiguration Information Disclosu…4.3
- CVE-2025-9274Oxford Instruments Imaris Viewer IMS File Parsing Uninitiali…7.8
- CVE-2025-9275Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bou…7.8
Are you affected by CVE-2025-9265?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST