Skip to content
Sign in
8.6 High

CVE-2025-26961 Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not…

Description

Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Fresh Framework: from n/a through <= 1.70.0.

Affected products and versions

Product Affected versions Fixed in
Fresh Framework 1.70 earliest → 1.70.0 No fix stated
Fresh Framework 1.70 earliest → 1.70.0 No fix stated

Other CVEs of Fresh Framework

The 2 CVEs of Fresh Framework →
CVE-2025-26936 Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework… 10.0 Critical
Track this CVE