VYPR
← All advisories
High severity7.5NVD Advisory· Published Oct 16, 2025· Updated Jun 17, 2026

CVE-2025-41020

CVE-2025-41020

Description

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0. This vulnerability allows an attacker to access data belonging to other customers through the 'id' parameter in '/admin/ticket_a4.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Sergestec/Exito3 versions
    cpe:2.3:a:sergestec:exito:8.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sergestec:exito:8.0:*:*:*:*:*:*:*
    • (no CPE)range: = 8.0
    • (no CPE)range: 8.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.