CVE-2025-67586

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.

CVSS v3.1

4.7 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2025-12-09

Updated

2026-04-28

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52511

References

• CVE Record
• NVD entry

Related

• CVE-2025-6758
• CVE-2025-6762
• CVE-2025-6753
• CVE-2025-6763
• CVE-2025-6752
• CVE-2025-67644