CVE-2025-54654

MediumCVSS 6.2

Published: 11/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

A permission control vulnerability in the Gallery module allows bypassing access controls. Successful exploitation may affect service confidentiality.

Risk Assessment

An attacker could gain access to data they are not authorized to view, potentially compromising the confidentiality of organizational information.

Recommendation

Update the software containing the Gallery module to the latest version and verify that permission settings are correctly configured.

Other vulnerabilities in Gallery module

CVE-2026-49301Medium
Permission control vulnerability in the Gallery module. Successful exploitation may affect service confidentiality.

Original NVD description (English source)

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality

Vulnerability data from NVD (NIST) · CISA KEV · EPSS