Skip to content

CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-75325

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-08-26
Updated: 2026-08-27
Assigning organization: mitre

Description

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/fangtang7/CVE/blob/main/DWSurvey/DWSurvey%20%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E.md ↗