CVE-2025-41017: Davantis Dfusion

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.

Affected products

• Davantis Dfusion: before 6.186.1 (fixed in 6.186.1)

Published 2025-11-24. Last modified 2026-10-08.