Is CVE-2026-75325 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-75325 being exploited in the wild.

How severe is CVE-2026-75325?

Critical severity, with a CVSS score of 9.8, published 26 August 2026.

Which products and versions are affected?

DWSurvey DWSurvey 6.14.0 and earlier.

Is there a fix for CVE-2026-75325?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-75325 attacked?

It is attacked over the network.

Am I affected by CVE-2026-75325?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-75325: DWSurvey authentication bypass in API endpoints

CVE-2026-75325 · Severity: critical · CVSS 9.8 · Published 2026-08-26

DWSurvey is an open-source questionnaire and survey management system. The application fails to properly protect two API endpoint paths, allowing unauthenticated attackers to access survey data and upload files without logging in. This enables unauthorized data theft and malicious file uploads that could compromise the system.

Quick answers

Is CVE-2026-75325 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-75325 being exploited in the wild.
How severe is CVE-2026-75325?: Critical severity, with a CVSS score of 9.8, published 26 August 2026.
Which products and versions are affected?: DWSurvey DWSurvey 6.14.0 and earlier.
Is there a fix for CVE-2026-75325?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-75325 attacked?: It is attacked over the network.
Am I affected by CVE-2026-75325?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

DWSurvey's Shiro authentication filter configuration in ShiroConfig.java explicitly defines protected paths for '/api/dwsurvey/anon/', '/api/dwsurvey/app/', and '/api/dwsurvey/admin/', but critically omits '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' from any filtering rules. This authentication bypass allows unauthenticated network access to two exposed controller endpoints: DwAnswerSurveyController (serving GET /api/dwsurvey/none/v6/dw-answer-survey/survey-json-by-survey-id.do) which leaks questionnaire data, and UploadController (serving POST /api/dwsurvey/up/up-file.do) which permits arbitrary file uploads. No authentication or user interaction is required; the vulnerability is exploitable by any network-adjacent attacker with knowledge of the endpoint paths. Patches are not yet publicly available for version 6.14.0 and earlier.

Affected products

DWSurvey DWSurvey 6.14.0 and earlier

Timeline

2026-08-26: disclosed

References

https://github.com/fangtang7/CVE/blob/main/DWSurvey/DWSurvey%20%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E.md

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.