CVE-2025-26523 — Insufficient Authorization Vulnerability in RupeeWeb trading platform

CVE-2025-26523

Insufficient Authorization Vulnerability in RupeeWeb trading platform PUBLISHED

Description (CNA)

This vulnerability exists in RupeeWeb trading platform due to insufficient authorization controls on certain API endpoints handling addition and deletion operations. Successful exploitation of this vulnerability could allow an authenticated remote attacker to modify information belonging to other user accounts.

Affected (CNA)

Vendor / product	Versions
Rupeeseed Technology Ventures / RupeeWeb	affected <66.9

CWE

CWE-266

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0020

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.