CVE-2025-61197
High
Description
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage
SeverityHigh
CVSS8.9
Exploit probability—
ProductOptimod 5950
PublishedOct 6, 2025
First seenOct 6, 2025
Weakness typeCWE-602CWE-602
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Orban Optimod 5950 | 1.0.0.33 ≤ v ≤ 2.5.26 | — |
| Orban Optimod 5950HD | 1.0.0.33 ≤ v ≤ 2.5.26 | — |
| Orban Optimod 5750 | 1.0.0.33 ≤ v ≤ 2.5.26 | — |
| Orban Optimod 5750HD | 1.0.0.33 ≤ v ≤ 2.5.26 | — |
| Orban Optimod Trio | 1.0.0.33 ≤ v ≤ 2.5.26 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.