CVE-2025-48044Suited to automated attack · CISA
Authorization bypass when bypass policy condition evaluates to true
CVSS score
8.6
EPSS probability
%0.7
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.3
CVE-2026-105283
Internal error terms inspected into AshTypescript RPC error responses
A
Patch verified
8.3
CVE-2026-82673
Path traversal in AshAdmin file uploads via unsanitized client filename
A
Patch verifiedEPSS %1
8.7
CVE-2026-81636
Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service
A
Patch verifiedEPSS %1
8.7
CVE-2026-74837
Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter
A
Patch verifiedEPSS %1
7.5
CVE-2026-67579
Filter expression injection via forged keyset pagination cursor in Ash
A
Patch verifiedEPSS %1
8.2
CVE-2026-77856
Unbounded atom creation from typed struct field names in AshTypescript field selector
A
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-48044"