CVE-2025-66954

CVE-2025-66954 – Buffalo LinkStation Username Enumeration via IDOR Summary A vulnerability in Buffalo LinkStation firmware version 1.85-0.01 allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue arises due to improper access contr...