High 8.6Published Oct 24, 2025

CVE-2025-34293GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

Updated under an hour ago (Oct 26, 2026, 1:20 PM ET)

Does this affect you?

It affects Naviga Global / Miles 33 GN4 Publishing System. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Naviga Global / Miles 33 GN4 Publishing System

Exploited in the last 30 days

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the stored password and the account's security question and answer. The exposed recovery data and encrypted password may be used to reset or take over the target account.

CVSS: 8.6 HIGH (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness (CWE): CWE-639
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: May 13, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Naviga Global / Miles 33 GN4 Publishing System naviga_global_miles_33:gn4_publishing_system (from the name)	before 2.6	CNA record

References

References

https://www.miles33.com/news/news/5955/naviga--miles-33--acquisition.html	media-coverage, related
https://nne.navigacloud.com/GN4Help/gn4_introduction_to_gn4.htm	product
https://www.miles33.com/section/14/gn4	product
https://www.vulncheck.com/advisories/gn4-publishing-system-idor-information-disclosure	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.