Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 CVE-2026-25197 - Critical A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. https://www.thehackerwire.com/vulnerability/CVE-2026-25197/ https://t.co/zTfB4c2kmm
Post summary
The post announces CVE‑2026‑25197 as a critical flaw that permits an authenticated user to change the user ID in an API call to access other profiles.
[CVE-2026-25197: CRITICAL] A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.#cve,CVE-2026-25197,#cybersecurity https://cvefind.com/CVE-2026-25197
Post summary
The post announces a critical vulnerability in an API endpoint that enables authenticated users to impersonate other users by changing the user ID in requests.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mygardyn | cloud_api | - | - | - |