CVE-2025-58957

MediumCVSS 4.3

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

Missing Authorization vulnerability in VPSUForm (versions up to 3.2.20) allows exploiting incorrectly configured access control security levels.

Risk Assessment

Unauthorized users may exploit the missing authorization to perform unauthorized actions, potentially leading to data security breaches.

Recommendation

Update VPSUForm to a patched version or properly configure access control.

Other vulnerabilities in VPSUForm

CVE-2025-68551Medium
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data. This issue affects VPSUForm from n/a through <= 3.2.24.

Original NVD description (English source)

Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a through <= 3.2.20.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS