VYPR
Unrated severityNVD Advisory· Published Jan 12, 2026· Updated Jan 12, 2026

Multiple vulnerabilities in Viafirma products

CVE-2025-41078

Description

Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.

Affected products

2
  • Range: =3.7.129
  • Viafirma/Viafirma Documentsv5
    Range: v3.7.129

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.