CVE-2025-65742

HIGH 8.2CVE-2025-65742 · Published 15/12/2025 · updated 07/10/2026

In short

CVE-2025-65742 is a HIGH (CVSS 8.2) vulnerability affecting omnidocs (newgensoft).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
omnidocs newgensoft	`= 11.0`	No fix yet

Description

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request.

References

CBx216/CVE-2025-65742-Newgen-OmniDocs-LDAP-BFLA · Exploit
newgensoft.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free