Critical severity9.8NVD Advisory· Published Nov 18, 2025· Updated Jun 17, 2026
CVE-2025-41346
CVE-2025-41346
Description
Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availability of the data stored in the application.
Affected products
3- Range: = 24.11.27
- Informatica del Este/WinPlusv5Range: 24.11.27
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.