CVE-2025-27581

Summary

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

Affected Software

Weaknesses

• CWE-425: CWE-425 Direct Request ('Forced Browsing')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/brics-dev/brics
• https://brics.cit.nih.gov
• https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/README.md

• ←Previous
• Next→