CVE-2025-62649

MEDIUM5.8

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders

Published Oct 17, 2025

Modified 4 months ago

Details

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders.

References

WEB

https://archive.today/fMYQp

WEB

https://bobdahacker.com/blog/rbi-hacked-drive-thrus/

WEB

https://web.archive.org/web/20250906134240/https:/bobdahacker.com/blog/rbi-hacked-drive-thrus

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-62649

WEB

https://www.malwarebytes.com/blog/news/2025/09/popeyes-tim-hortons-burger-king-platforms-have-catastrophic-vulnerabilities-say-hackers

WEB