CVE-2025-65784: Hubert Hub

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request.

Affected products

• Hubert Hub: version 2.0.1.27.3 only

Published 2026-01-13. Last modified 2026-07-05.