PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-75325 DWSurvey CVE debrief

CVE-2026-75325 is a critical authentication bypass vulnerability in DWSurvey v6.14.0. The vulnerability allows attackers to bypass authentication via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters. This vulnerability has a CVSS score of 9.8 and is considered critical. Defenders should assess exposure and potential impact, and implement compensating controls to mitigate potential risks. The CVE record and NVD vulnerability detail page provide information on the vulnerability, but additional verification is required to determine the scope of affected systems and potential impact.

Vendor
DWSurvey
Product
DWSurvey
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-26
Original CVE updated
2026-09-09
Advisory published
2026-08-26
Advisory updated
2026-09-09

Who should care

Defenders responsible for DWSurvey installations should assess exposure and potential impact. They should verify exposure by checking system configurations and versions, assess potential impact by evaluating system dependencies and criticality, and implement compensating controls to mitigate potential risks. Security teams and vulnerability management teams should also be aware of this vulnerability and its potential

Why it matters

CVE-2026-75325 is a critical authentication bypass vulnerability in DWSurvey v6.14.0 that allows attackers to bypass authentication. Defenders responsible for DWSurvey installations should assess exposure and potential impact, and implement compensating controls to mitigate potential risks.

  • Verify exposure and assess potential impact
  • Implement compensating controls to mitigate potential risks
  • Monitor system logs for potential exploitation attempts

Technical summary

The vulnerability allows attackers to bypass authentication via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters in DWSurvey v6.14.0. This vulnerability has a CVSS score of 9.8 and is considered critical. The affected product is DWSurvey, and defenders should verify exposure and assess potential impact. The CVE record and NVD vulnerability detail page provide information on the vulnerability.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact.

Recommended defensive actions

  • Verify exposure by checking system configurations and versions
  • Assess potential impact by evaluating system dependencies and criticality
  • Implement compensating controls to mitigate potential risks

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, but additional verification is required to determine the scope of affected systems and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-75325 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-75325

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-75325 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-75325

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://github.com/fangtang7/CVE/blob/main/DWSurvey/DWSurvey%20%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E.md

    [email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.