Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2025-62650 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-62650

CVE-2025-62650

HIGH8.3

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen

Published Oct 17, 2025

Modified 4 months ago

Details

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen.

References

WEB

https://archive.today/fMYQp

WEB

https://bobdahacker.com/blog/rbi-hacked-drive-thrus/

WEB

https://web.archive.org/web/20250906134240/https:/bobdahacker.com/blog/rbi-hacked-drive-thrus

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-62650

WEB

https://www.malwarebytes.com/blog/news/2025/09/popeyes-tim-hortons-burger-king-platforms-have-catastrophic-vulnerabilities-say-hackers

WEB

https://www.yahoo.com/news/articles/burger-king-hacked-attackers-impressed-124154038.html

CVSS Analysis

CVSS v3.1

8.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

8.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Weakness Type (CWE)

Other

CWE-603

Ecosystems

Timeline

PublishedOct 17, 2025

ModifiedOct 29, 2025