CVE Feed

    Dashboard / CVE / CVE-2025-8549

    CVE-2025-8549

    A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java. The manipulation leads to weak password requirements. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as d09cb19a8e7d7e5151282926ada54080244d499f. It is recommended to apply a patch to fix this issue.

    Published:Aug 5, 2025
    Last Modified:Sep 3, 2025
    EPS:Aug 5, 2025
    EPSS Score:0.00044
    CVSS Score:3.7

    Affected Products

    Vendor
    Atjiu
    Product
    Pybbs
    Vendor
    Pybbs Project
    Product
    Pybbs

    Exploits

    https://github.com/atjiu/pybbs/issues/201https://github.com/atjiu/pybbs/issues/201#issue-3256288016https://github.com/atjiu/pybbs/issues/201https://github.com/atjiu/pybbs/issues/201#issue-3256288016

    Common Weakness Enumeration

    CWE-521 Weak Password Requirements

    Related CVEs

    CVE-2026-4495 (CVSS 2) — A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/mai…
    CVE-2026-4494 (CVSS 2) — A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/jav…
    CVE-2025-12297 (CVSS 2.1) — A vulnerability was detected in atjiu pybbs up to 6.0.0. This affects an unknown function of the file UserApiC…
    CVE-2025-8814 (CVSS 2.1) — A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the fun…
    CVE-2025-8813 (CVSS 2) — A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability af…
    CVE-2025-8812 (CVSS 1.9) — A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an un…
    CVE-2025-8555 (CVSS 2) — A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unk…
    CVE-2025-8554 (CVSS 1.9) — A vulnerability, which was classified as problematic, has been found in atjiu pybbs up to 6.0.0. This issue af…
    CVE-2025-8553 (CVSS 1.9) — A vulnerability classified as problematic was found in atjiu pybbs up to 6.0.0. This vulnerability affects unk…
    CVE-2025-8552 (CVSS 1.9) — A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown p…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High