CVE-2025-11853 | Sismics Teedy up to 1.11 API Endpoint /api/file access control

A vulnerability categorized as critical has been discovered in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing manipulation can lead to improper access controls.

This vulnerability appears as CVE-2025-11853. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.