File Enumeration Vulnerability in eMudhra's emBridge
CVE-2026-125659

2.1LOW

Key Information:

Vendor

Emudhra

Status
Embridge
Vendor
CVE Published:
13 November 2026

What is CVE-2026-125659?

The eMudhra emBridge product is vulnerable due to insufficient authorization checks within its FileBrowser API endpoints. This deficiency allows unauthenticated attackers on the same local area network to potentially exploit the system by sending crafted HTTP requests to the local HTTPS Web API. These endpoints can reveal sensitive information regarding the file and directory structure of the targeted environment, facilitating unauthorized file enumeration. However, it is important to note that this vulnerability does not grant attackers access to the actual contents of files, nor does it allow for file modification, deletion, code execution, or exposure of cryptographic keys and hardware token PINs.

Affected Version(s)

emBridge MacOS version 3.2.4.x to 3.2.6.x

emBridge Red Hat version 3.2.0.x to 3.3.0.x

emBridge Ubuntu version 3.2.0.x to 3.3.0.x

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory
https://emudhra.com/en/post/cve-2026-125659
vendor-advisory

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Karan Saini
.