NVD disclosure day

Published threat advisories for November 26, 2025

CVE advisoryCRITICAL

CVE-2025-50433

Imonnit User Account Takeover Via Password Reset

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in imonnit.com's password reset mechanism enables malicious actors to escalate privileges and take over user accounts. This flaw is critical because it allows for the compromise of arbitrary user accounts without prior access, potentially impacting system data and user account integrity if the platform

NVD published:

CVE advisoryCRITICAL

CVE-2025-65669

Classroomio allows unauthorized students to delete courses.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An issue exists in classroomio where student accounts can delete courses from the Explore page without authorization. This bypasses intended administrative restrictions and could disrupt educational operations through unauthorized removal of course content. The affected technology is classroomio, specifically version 0

NVD published: