Unrated severityNVD Advisory· Published Oct 16, 2025· Updated Oct 16, 2025

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito

CVE-2025-41020

Description

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0. This vulnerability allows an attacker to access data belonging to other customers through the 'id' parameter in '/admin/ticket_a4.php'.

Affected products

Sergestec/Exitollm-fuzzy
Range: =8.0
Sergestec/Exitov5
Range: 8.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-productsmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000