CVE-2025-68959

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Jan 14, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-68968.8A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.CVE-2025-689604.7Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect avCVE-2025-689614.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-689624.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-689635.3Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confideCVE-2025-689645.5Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-689655.5Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiaCVE-2025-689665.5Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiaCVE-2025-689675.5Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service cCVE-2025-689687.8Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input functioCVE-2025-689694.7Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affectCVE-2025-68979.8A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality
CVE-2025-68959: Medium severity, CVSS 5.5 | Vulnix