CVE-2025-3646 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unauthorized users to add users as shared ow…
Medium CVSS: 6.9

CVE-2025-3646

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unauthorized users to add users as shared owners to any device by exploiting missing permission checks. Attackers can send requests to the device share API to gain unauthorized access to devices and view owner information without proper authorization validation.
Vendor
Petlibro
Product
Petlibro
CWE
CWE-306
Yayın Tarihi
2026-01-04 00:15:43
Güncelleme
2026-02-03 17:42:15
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

Referanslar