CVE-2025-52168

13th percentile - higher than 13% of all known CVEs

An incorrect access control vulnerability in the dynawebservice component of Agorum core open versions 11.9.2 and 11.10.1 allows unauthenticated attackers to access arbitrary files on the system.

The organization is at risk of sensitive data leakage, including configuration files, customer data, or other confidential information stored on the server. The attack requires no authentication, increasing the likelihood of exploitation.

Immediately update Agorum core open to a patched version. If no update is available, restrict access to the dynawebservice component to trusted networks only.