CVE-2025-25711: Improper Preservation of Permissions

An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the /tnexus/rest/admin/updateUser API endpoint...

PT-2025-11091

Name of the Vulnerable Software and Affected Versions: tNexus Airport View version 2.8 Description: The issue allows a remote attacker to escalate privileges via the ProfileID value to the "/tnexus/rest/admin/updateUser" API endpoint. Recommendations: For tNexus Airport View version 2.8, consider...