Authentication Bypass Vulnerability in BandiZip by Bandisoft
CVE-2025-50325

5.4MEDIUM

Key Information:

Vendor

Bandisoft

Status
BandiZip
Vendor
CVE Published:
22 July 2026

What is CVE-2025-50325?

The vulnerability in BandiZip version 7.37 allows remote attackers to bypass the Mark-of-the-Web protection mechanism. This flaw poses significant risk by enabling unauthorized access and potential exploitation of security features designed to protect users, making it crucial for organizations to assess their exposure and implement necessary security measures.

References

https://en.bandisoft.com/bandizip/help/zone-identifier/
https://en.bandisoft.com/bandizip/history/
https://github.com/OV-0-VO/Public-references/blob/main/CV...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.