CVE-2025-25497

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.

Published 2025-03-06. Last modified 2026-06-17.