VULNERABILITY INTELLIGENCE

CVE-2025-66723

CVSS score7.5 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-732

Primary references