EUVD-2025-5316

Malicious code in bioql PyPI...

CVE-2025-1091: Missing Authorization

A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known...

CVE-2025-1091

CVE-2025-1091 is tied to Tenable Identity Exposure before version 3.77.9, where a Broken Authorization issue allowed any authenticated user to download IOA scripts and configuration files if the URL is known. Publicly available documents indicate the vulnerability is addressed in Tenable’s adviso...