Medium severity5.3NVD Advisory· Published Jul 29, 2025· Updated Jun 17, 2026

CVE-2025-54768

Description

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xorux/LPAR2RRD2 versions
cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*range: <=8.04
- (no CPE)range: 8.04
LPAR2RRD/LPAR2RRDllm-fuzzy

Patches

Vulnerability mechanics

References

korelogic.com/Resources/Advisories/KL-001-2025-015.txtnvdExploitThird Party Advisory
lpar2rrd.com/note800.phpnvdRelease Notes
seclists.org/fulldisclosure/2025/Jul/18nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000