CyberRota
Back to database

CVE-2026-25660

CRITICAL · CVSS 9.8 EPSS 0.03% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-24 · Last synced: 2026-05-24

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-25660
Severity
CRITICAL
CVSS
9.8
EPSS
0.03%

Original NVD Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication with certain function calls.  This bypass allows assigning arbitrary permission to any user existing in CodeChecker. This issue affects CodeChecker: through 6.27.3.