CVE-2025-52166

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Administrator and access sensitive components and information.

Published 2025-07-18. Last modified 2026-07-05.