What’s Vulnerable › Vulnerabilities

CVE-2025-3014: Insecure direct object references (IDOR) in NightWolf Penetration Platform

• Severity: high (CVSS 8.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-31 · updated 2026-06-17
• Weakness: CWE-285

Description

Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

Affected products

• FPT Software NightWolf Penetration Platform: 2.1.4

References

• https://bug.report.night-wolf.io/changelogs

Get alerted when CVE-2025-3014 or the next vulnerability affects your stack