CVE-2025-64063

The Primakon Pi Portal version 1.0.18 is vulnerable to an improper authorization flaw (CWE-285 ) where API endpoints fail to enforce sufficient access controls. A standard user can bypass UI restrictions by sending direct HTTP requests to administrative endpoints. This allows for unauthorized acc...