CVE-2026-75325

CriticalCVSS 9.8

Published: 26/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

DWSurvey v6.14.0 is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

Risk Assessment

An attacker can gain unauthorized access to application functions, potentially leading to data confidentiality and integrity breaches.

Recommendation

Update DWSurvey to the latest version that includes a fix for this vulnerability. Additionally, restrict access to these paths at the firewall or server level.

Original NVD description (English source)

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.