CVE-2025-9313

An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated connection through a "mmBackup" application. This flaw allows attackers to bypass authentication mechanisms and gain unauthorized access to database with sensitive data. This issue affects Asseco mMedica in versions before 11.9.5.

• CWE-288

• https://cert.pl/en/posts/2025/10/CVE-2025-9313/
• https://mmedica.asseco.pl/

Published

Oct 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9307A flaw has been found in PHPGurukul Online Course Registrati…9.8
• CVE-2025-9308A vulnerability has been found in yarnpkg Yarn up to 1.22.22…5.5
• CVE-2025-9309A vulnerability was found in Tenda AC10 16.03.10.13. Affecte…7
• CVE-2025-9310A vulnerability was determined in yeqifu carRental up to 3fa…7.5
• CVE-2025-9311A vulnerability was identified in itsourcecode Apartment Man…9.8
• CVE-2025-9312A missing authentication enforcement vulnerability exists in…9.8
• CVE-2025-9314The Developer Tools WordPress plugin through 1.1.3 contains …9.8
• CVE-2025-9315An unauthenticated device registration vulnerability, caused…6.3
• CVE-2025-9316N-central < 2025.4 can generate sessionIDs for unauthenticat…6.9
• CVE-2025-9317The vulnerability, if exploited, could allow a miscreant wit…8.4
• CVE-2025-9318The Quiz and Survey Master (QSM) – Easy Quiz and Survey Make…6.5
• CVE-2025-9319A potential vulnerability was reported in the Lenovo Wallpap…7.5