High severity8.1NVD Advisory· Published Mar 6, 2025· Updated Apr 15, 2026

CVE-2025-25497

Description

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netsweeper/Netsweeperllm-fuzzy
Range: <=8.2.6

Patches

Vulnerability mechanics

References

helpdesk.netsweeper.com/docs/8_2_Docs/8_2_Netsweeper_Docs/Content/Release_Notes/Netsweeper_Release_Notes/8_2_Release_Notes/8_2_7_Release_and_Downloads.htmnvd
packetstorm.news/files/id/188626/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000