CVE-2025-28232

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2025-04-18

Last modified

2025-04-22

Weaknesses

CWE-284

Affected products

• Jmb0150 Firmware (Jmbroadcast)

References

• https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28232