{
    "document": {
        "category": "csaf_security_advisory",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "nl",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            },
            {
                "category": "description",
                "text": "Microsoft heeft kwetsbaarheden verholpen in Azure-producten.",
                "title": "Feiten"
            },
            {
                "category": "description",
                "text": "De kwetsbaarheden zijn gerelateerd aan onjuiste toegangscontrolemechanismen, waardoor geautoriseerde aanvallers lokale spoofing-aanvallen kunnen uitvoeren, verhoogde privileges kunnen verkrijgen, gevoelige informatie kunnen onthullen en de integriteit van systemen kunnen compromitteren. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van gevoelige gegevens.\n```\nAzure Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-53765 | 4.40 | Toegang tot gevoelige gegevens      | \n| CVE-2025-53793 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure OpenAI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-53767 | 10.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Portal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-53792 | 9.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Virtual Machines: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-53781 | 7.70 | Toegang tot gevoelige gegevens      | \n| CVE-2025-49707 | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure File Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2025-53729 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```",
                "title": "Interpretaties"
            },
            {
                "category": "description",
                "text": "Microsoft heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
                "title": "Oplossingen"
            },
            {
                "category": "general",
                "text": "medium",
                "title": "Kans"
            },
            {
                "category": "general",
                "text": "high",
                "title": "Schade"
            },
            {
                "category": "general",
                "text": "Exposure of Private Personal Information to an Unauthorized Actor",
                "title": "CWE-359"
            },
            {
                "category": "general",
                "text": "Improper Access Control",
                "title": "CWE-284"
            },
            {
                "category": "general",
                "text": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                "title": "CWE-22"
            },
            {
                "category": "general",
                "text": "Exposure of Sensitive Information to an Unauthorized Actor",
                "title": "CWE-200"
            },
            {
                "category": "general",
                "text": "Improper Authentication",
                "title": "CWE-287"
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "Nationaal Cyber Security Centrum",
            "namespace": "https://www.ncsc.nl/"
        },
        "references": [
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://portal.msrc.microsoft.com/en-us/security-guidance"
            }
        ],
        "title": "Kwetsbaarheden verholpen in Azure-producten",
        "tracking": {
            "current_release_date": "2025-08-13T07:22:17.432067Z",
            "generator": {
                "date": "2025-08-04T16:30:00Z",
                "engine": {
                    "name": "V.A.",
                    "version": "1.2"
                }
            },
            "id": "NCSC-2025-0249",
            "initial_release_date": "2025-08-13T07:22:17.432067Z",
            "revision_history": [
                {
                    "date": "2025-08-13T07:22:17.432067Z",
                    "number": "1.0.0",
                    "summary": "Initiele versie"
                }
            ],
            "status": "final",
            "version": "1.0.0"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/open ai",
                                "product": {
                                    "name": "vers:unknown/open ai",
                                    "product_id": "CSAFPID-3039718",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:azure:open_ai"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/portal",
                                "product": {
                                    "name": "vers:unknown/portal",
                                    "product_id": "CSAFPID-3039717",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:azure:portal"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Azure"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.0|<18.3.0.0",
                                "product": {
                                    "name": "vers:unknown/1.0.0|<18.3.0.0",
                                    "product_id": "CSAFPID-3049136"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Azure File Sync"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=1.0.0|<18.0.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=1.0.0|<18.0.0.0",
                                            "product_id": "CSAFPID-3049230"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=1.0.0|<18.3.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=1.0.0|<18.3.0.0",
                                            "product_id": "CSAFPID-3049229"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=18.0|<18.0.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=18.0|<18.0.0.0",
                                            "product_id": "CSAFPID-3048954"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=19.0|<19.1.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=19.0|<19.1.0.0",
                                            "product_id": "CSAFPID-3048951"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=20.0|<20.0.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=20.0|<20.0.0.0",
                                            "product_id": "CSAFPID-3048952"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=21.0|<21.2.0.0",
                                        "product": {
                                            "name": "vers:unknown/>=21.0|<21.2.0.0",
                                            "product_id": "CSAFPID-3048953"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure File Sync"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/1.2406.1.23",
                                        "product": {
                                            "name": "vers:microsoft/1.2406.1.23",
                                            "product_id": "CSAFPID-3049184"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/1.2408.1.50",
                                        "product": {
                                            "name": "vers:microsoft/1.2408.1.50",
                                            "product_id": "CSAFPID-3049183"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/1.2501.1.47",
                                        "product": {
                                            "name": "vers:microsoft/1.2501.1.47",
                                            "product_id": "CSAFPID-3049182"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/102.10.2.11",
                                        "product": {
                                            "name": "vers:microsoft/102.10.2.11",
                                            "product_id": "CSAFPID-3049090"
                                        }
                                    },
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:unknown/>=1.0.0|<102.10.2.11",
                                        "product": {
                                            "name": "vers:unknown/>=1.0.0|<102.10.2.11",
                                            "product_id": "CSAFPID-3049089"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure Stack Hub"
                            }
                        ],
                        "category": "product_family",
                        "name": "Microsoft"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3049759",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure File Sync v18"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3049760",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure File Sync v19"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3049761",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure File Sync v20"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3049762",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure File Sync v21"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3038235",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure Open AI"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3038234",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_portal:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure Portal"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-1560226",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_stack_hub:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure Stack Hub"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/unknown",
                                        "product": {
                                            "name": "vers:microsoft/unknown",
                                            "product_id": "CSAFPID-3048852",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:azure_stack_hub_2406:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Azure Stack Hub 2406"
                            }
                        ],
                        "category": "product_family",
                        "name": "Azure"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/n/a",
                                "product": {
                                    "name": "vers:unknown/n/a",
                                    "product_id": "CSAFPID-3038148"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Azure Open AI"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/n/a",
                                "product": {
                                    "name": "vers:unknown/n/a",
                                    "product_id": "CSAFPID-3038150"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Azure Portal"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.0|<102.10.2.11",
                                "product": {
                                    "name": "vers:unknown/1.0.0|<102.10.2.11",
                                    "product_id": "CSAFPID-3048737"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Azure Stack Hub"
                    }
                ],
                "category": "vendor",
                "name": "Microsoft"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2025-49707",
            "cwe": {
                "id": "CWE-284",
                "name": "Improper Access Control"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Access Control",
                    "title": "CWE-284"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-49707 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49707.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
                        "baseScore": 7.9,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-3039718",
                        "CSAFPID-3039717",
                        "CSAFPID-3049136",
                        "CSAFPID-3049230",
                        "CSAFPID-3049229",
                        "CSAFPID-3048954",
                        "CSAFPID-3048951",
                        "CSAFPID-3048952",
                        "CSAFPID-3048953",
                        "CSAFPID-3049759",
                        "CSAFPID-3049760",
                        "CSAFPID-3049761",
                        "CSAFPID-3049762",
                        "CSAFPID-3038235",
                        "CSAFPID-3038148",
                        "CSAFPID-3038234",
                        "CSAFPID-3038150",
                        "CSAFPID-3049184",
                        "CSAFPID-3049183",
                        "CSAFPID-3049182",
                        "CSAFPID-3049090",
                        "CSAFPID-1560226",
                        "CSAFPID-3048737",
                        "CSAFPID-3049089",
                        "CSAFPID-3048852"
                    ]
                }
            ],
            "title": "CVE-2025-49707"
        },
        {
            "cve": "CVE-2025-53729",
            "cwe": {
                "id": "CWE-284",
                "name": "Improper Access Control"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Access Control",
                    "title": "CWE-284"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53729 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53729.json"
                }
            ],
            "title": "CVE-2025-53729"
        },
        {
            "cve": "CVE-2025-53765",
            "cwe": {
                "id": "CWE-359",
                "name": "Exposure of Private Personal Information to an Unauthorized Actor"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Exposure of Private Personal Information to an Unauthorized Actor",
                    "title": "CWE-359"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53765 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53765.json"
                }
            ],
            "title": "CVE-2025-53765"
        },
        {
            "cve": "CVE-2025-53767",
            "cwe": {
                "id": "CWE-918",
                "name": "Server-Side Request Forgery (SSRF)"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Server-Side Request Forgery (SSRF)",
                    "title": "CWE-918"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53767 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53767.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
                        "baseScore": 10.0,
                        "baseSeverity": "CRITICAL"
                    },
                    "products": [
                        "CSAFPID-3039718",
                        "CSAFPID-3039717",
                        "CSAFPID-3049136",
                        "CSAFPID-3049230",
                        "CSAFPID-3049229",
                        "CSAFPID-3048954",
                        "CSAFPID-3048951",
                        "CSAFPID-3048952",
                        "CSAFPID-3048953",
                        "CSAFPID-3049759",
                        "CSAFPID-3049760",
                        "CSAFPID-3049761",
                        "CSAFPID-3049762",
                        "CSAFPID-3038235",
                        "CSAFPID-3038148",
                        "CSAFPID-3038234",
                        "CSAFPID-3038150",
                        "CSAFPID-3049184",
                        "CSAFPID-3049183",
                        "CSAFPID-3049182",
                        "CSAFPID-3049090",
                        "CSAFPID-1560226",
                        "CSAFPID-3048737",
                        "CSAFPID-3049089",
                        "CSAFPID-3048852"
                    ]
                }
            ],
            "title": "CVE-2025-53767"
        },
        {
            "cve": "CVE-2025-53781",
            "cwe": {
                "id": "CWE-200",
                "name": "Exposure of Sensitive Information to an Unauthorized Actor"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Exposure of Sensitive Information to an Unauthorized Actor",
                    "title": "CWE-200"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53781 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53781.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
                        "baseScore": 7.7,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-3039718",
                        "CSAFPID-3039717",
                        "CSAFPID-3049136",
                        "CSAFPID-3049230",
                        "CSAFPID-3049229",
                        "CSAFPID-3048954",
                        "CSAFPID-3048951",
                        "CSAFPID-3048952",
                        "CSAFPID-3048953",
                        "CSAFPID-3049759",
                        "CSAFPID-3049760",
                        "CSAFPID-3049761",
                        "CSAFPID-3049762",
                        "CSAFPID-3038235",
                        "CSAFPID-3038148",
                        "CSAFPID-3038234",
                        "CSAFPID-3038150",
                        "CSAFPID-3049184",
                        "CSAFPID-3049183",
                        "CSAFPID-3049182",
                        "CSAFPID-3049090",
                        "CSAFPID-1560226",
                        "CSAFPID-3048737",
                        "CSAFPID-3049089",
                        "CSAFPID-3048852"
                    ]
                }
            ],
            "title": "CVE-2025-53781"
        },
        {
            "cve": "CVE-2025-53792",
            "cwe": {
                "id": "CWE-285",
                "name": "Improper Authorization"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Authorization",
                    "title": "CWE-285"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53792 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53792.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                        "baseScore": 9.1,
                        "baseSeverity": "CRITICAL"
                    },
                    "products": [
                        "CSAFPID-3039718",
                        "CSAFPID-3039717",
                        "CSAFPID-3049136",
                        "CSAFPID-3049230",
                        "CSAFPID-3049229",
                        "CSAFPID-3048954",
                        "CSAFPID-3048951",
                        "CSAFPID-3048952",
                        "CSAFPID-3048953",
                        "CSAFPID-3049759",
                        "CSAFPID-3049760",
                        "CSAFPID-3049761",
                        "CSAFPID-3049762",
                        "CSAFPID-3038235",
                        "CSAFPID-3038148",
                        "CSAFPID-3038234",
                        "CSAFPID-3038150",
                        "CSAFPID-3049184",
                        "CSAFPID-3049183",
                        "CSAFPID-3049182",
                        "CSAFPID-3049090",
                        "CSAFPID-1560226",
                        "CSAFPID-3048737",
                        "CSAFPID-3049089",
                        "CSAFPID-3048852"
                    ]
                }
            ],
            "title": "CVE-2025-53792"
        },
        {
            "cve": "CVE-2025-53793",
            "cwe": {
                "id": "CWE-22",
                "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                    "title": "CWE-22"
                },
                {
                    "category": "other",
                    "text": "Improper Authentication",
                    "title": "CWE-287"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3039718",
                    "CSAFPID-3039717",
                    "CSAFPID-3049136",
                    "CSAFPID-3049230",
                    "CSAFPID-3049229",
                    "CSAFPID-3048954",
                    "CSAFPID-3048951",
                    "CSAFPID-3048952",
                    "CSAFPID-3048953",
                    "CSAFPID-3049759",
                    "CSAFPID-3049760",
                    "CSAFPID-3049761",
                    "CSAFPID-3049762",
                    "CSAFPID-3038235",
                    "CSAFPID-3038148",
                    "CSAFPID-3038234",
                    "CSAFPID-3038150",
                    "CSAFPID-3049184",
                    "CSAFPID-3049183",
                    "CSAFPID-3049182",
                    "CSAFPID-3049090",
                    "CSAFPID-1560226",
                    "CSAFPID-3048737",
                    "CSAFPID-3049089",
                    "CSAFPID-3048852"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-53793 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53793.json"
                }
            ],
            "title": "CVE-2025-53793"
        }
    ]
}