CVE-2025-68027

CVE-2025-68027 is an Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking, specifically affecting versions up to and including 1.1.32. This flaw allows for Privilege Escalation, enabling an attacker to gain elevated access within the system. Rated with a CVSS score of 7.3 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, potentially leading to partial loss of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable. However, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness and potential interest.