VULNERABILITY INTELLIGENCE

CVE-2025-41016

EPSS probability0.30%
CISA KEVNot currently listed
Published2025-11-24
Last modified2026-10-18

Description

Inadequate access control vulnerability in Davantis DFUSION v6.177.7, which allows unauthorised actors to extract images and videos related to alarm events through access to “/alarms/<ALARM_ID>/<MEDIA>”, where the “MEDIA” parameter can take the value of “snapshot” or “video.mp4”. These media files contain images recorded by security cameras in response to triggered alerts.

Weakness classification

  • cve-coordination@incibe.es: CWE-862

Primary references