Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1336 CNY

100%

CVE-2025-26853 โ€” AI Deep Analysis Summary

CVSS 10.0 ยท Critical

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: CVE-2025-26853 is a critical security flaw in DESCOR INFOCAD. It stems from a broken **Authorization Mechanism**. ๐Ÿ“‰ **Consequences**: The system fails to verify user permissions correctly.โ€ฆ

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **Root Cause**: The core issue is **CWE-863: Incorrect Authorization**. The software does not properly enforce access controls. Users can access resources they are not entitled to.โ€ฆ

Q3Who is affected? (Versions/Components)

๐Ÿข **Affected Entities**: The vulnerability impacts **DESCOR INFOCAD FM**. Specifically, versions **3.5.1 and earlier** are at risk. Any organization using these older versions for BIM or facility management is exposed.โ€ฆ

Q4What can hackers do? (Privileges/Data)

๐Ÿ’€ **Attacker Capabilities**: Hackers can achieve **Full System Compromise**. With a CVSS score indicating High impact on C/I/A, they can: ๐Ÿ”“ Read sensitive BIM data. โœ๏ธ Modify critical facility records.โ€ฆ

Q5Is exploitation threshold high? (Auth/Config)

โšก **Exploitation Threshold**: The bar is **Extremely Low**. The CVSS vector shows: ๐ŸŒ Network Accessible (AV:N). ๐Ÿ”“ No Privileges Required (PR:N). ๐Ÿšซ No User Interaction Needed (UI:N). ๐Ÿ“‰ Low Complexity (AC:L).โ€ฆ

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿ” **Public Exploit Status**: Currently, **No Public PoC/Exploit** is listed in the data. However, the low complexity and lack of auth requirements make it highly attractive.โ€ฆ

Q7How to self-check? (Features/Scanning)

๐Ÿ”Ž **Self-Check Method**: Scan your infrastructure for **DESCOR INFOCAD FM** instances. Check the version number against **3.5.1**. If you are running v3.5.1 or older, you are vulnerable.โ€ฆ

Q8Is it fixed officially? (Patch/Mitigation)

๐Ÿฉน **Official Fix**: The vendor, Descor, has acknowledged the issue. A changelog entry titled "broken authorization schema" exists on their site. You must update to the **latest patched version** immediately.โ€ฆ

Q9What if no patch? (Workaround)

๐Ÿšง **No Patch Workaround**: If you cannot patch immediately: ๐Ÿšซ Restrict network access to the INFOCAD server. Use a **Firewall** to block external traffic. Implement strict **Network Segmentation**.โ€ฆ

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency Level**: **CRITICAL / IMMEDIATE ACTION REQUIRED**. The CVSS score is effectively 10.0 (High C/I/A, Low AC, No Auth). This is a remote code execution-level risk for data integrity. Do not delay.โ€ฆ