What’s Vulnerable › Vulnerabilities

CVE-2025-65742

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-15 · updated 2026-10-07
• Weakness: CWE-862

Description

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request.

Affected products

• Newgensoft Omnidocs: 11.0

References

• https://github.com/CBx216/CVE-2025-65742-Newgen-OmniDocs-LDAP-BFLA/blob/main/CVE-2025-65742.md
• https://newgensoft.com/

Get alerted when CVE-2025-65742 or the next vulnerability affects your stack