CVE-2025-9954: Acquia Dam

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.

Affected products

• Acquia Dam: before 1.1.5 (fixed in 1.1.5)

Published 2025-10-30. Last modified 2026-10-08.