CVE-2025-10643

CRITICAL

Wondershare Repairit - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to a storage account token. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26902.

Scores

CVSS v3 9.1
EPSS 0.0022
EPSS Percentile 44.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-732
Status published
Products (1)
wondershare/repairit 6.5.2
Published Sep 17, 2025
Tracked Since Feb 18, 2026