CVE-2025-54596

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jul 25, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-545976.1LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.CVE-2025-545986.5The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via CVE-2025-545997.5The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, wheCVE-2025-546017.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480CVE-2025-546027.0An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480CVE-2025-546039.0An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonationCVE-2025-546047.5Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).CVE-2025-546057.5Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).CVE-2025-546067.1Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability CVE-2025-546077.5Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect service confiCVE-2025-546084.0Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: SuccessCVE-2025-546097.5Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54596: Medium severity, CVSS 4.3 | Vulnix