PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-69189 EMV CVE debrief

A high-severity vulnerability (CVE-2025-69189) was discovered in JobBank, allowing attackers to exploit incorrectly configured access control security levels. This Missing Authorization vulnerability, scored 7.3 on the CVSS scale, affects JobBank versions from n/a through 1.2.3. The issue was publicly disclosed on June 17, 2026. Organizations using affected JobBank versions should take immediate action to mitigate potential risks. The vulnerability's high severity rating indicates a significant threat to affected systems. CVE-2025-69189 is a result of a broken access control mechanism within the JobBank plugin.

Vendor
EMV
Product
JobBank
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-17
Advisory published
2026-06-17
Advisory updated
2026-06-17

Who should care

Administrators and security teams responsible for JobBank installations, particularly those using versions up to 1.2.3, should be aware of this vulnerability. Given its high CVSS score of 7.3, prioritizing patching or mitigation efforts is crucial to prevent potential exploitation.

Technical summary

CVE-2025-69189 is a Missing Authorization vulnerability in the EMV JobBank plugin. It allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability is characterized by the following CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. This indicates that the vulnerability can be exploited remotely (AV:N), requires no authentication (PR:N), and can result in low impacts on confidentiality (C:L), integrity (I:L), and availability (A:L).

Defensive priority

High

Recommended defensive actions

  • Update JobBank to a version beyond 1.2.3 if available.
  • Implement additional access controls and monitoring for JobBank instances.
  • Review and correct the configuration of access control security levels in JobBank.
  • Restrict access to JobBank from untrusted networks or IP addresses.
  • Regularly review JobBank logs for suspicious activity.
  • Consider using a Web Application Firewall (WAF) to detect and prevent attacks.
  • Isolate JobBank instances from critical systems and data.

Evidence notes

The information provided is based on data from official sources, including the CVE.org record and the National Vulnerability Database (NVD). The CVE-2025-69189 entry was last modified on June 17, 2026, at 17:16:40.587Z. Additional details can be found in the Patchstack database, which reported the vulnerability.

Official resources

Publicly disclosed on June 17, 2026.