CVE-2025-27581: Nih Brics

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

Affected products

• Nih Brics: up to and including 14.0.0-67

Published 2025-04-24. Last modified 2026-06-17.