CVE-2025-46576

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Apr 27, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-465777.5There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.CVE-2025-465787.5There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to i CVE-2025-465797.8There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and whe CVE-2025-46589.8Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verif CVE-2025-465807.5There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation o CVE-2025-465819.8ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute com CVE-2025-465827.7A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the CVE-2025-465835.3There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the CVE-2025-465845.5Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerabilit CVE-2025-465857.0Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availabil CVE-2025-465865.5Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-465875.5Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confid