Critical · 9.1 CVE-2025-28232 EUVD-2025-11874GHSA-chx3-h6vh-h2pv

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without a…

Published Apr 18, 2025 · Updated Apr 22, 2025 · Assigned by mitre

Description

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28232