How to fix CVE-2025-67274?

Within 24 hours: Identify all systems running continuous.software v.2025.2 and assess exposure of excel-integration-service, integration-persistence-service, and portfolio-item-service endpoints; document affected data classifications and begin access logs review. Within 7 days: Implement network segmentation or WAF rules to restrict endpoint access, disable vulnerable modules if operationally feasible, and rotate any credentials potentially exposed through these services. Within 30 days: Upgrade to patched version immediately upon release, conduct forensic review for evidence of exploitation, and perform comprehensive audit of accessed sensitive data.

Is Aangine affected by CVE-2025-67274?

A HIGH severity vulnerability in continuous.software engine v.2025.2 exposes sensitive information through multiple service endpoints, potentially compromising confidential business data, integration credentials, and portfolio information accessible to remote attackers without authentication.

CVE-2025-67274

HIGH

2026-01-26 [email protected]

Information Disclosure Aangine

7.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 26, 2026 - 17:16 nvd

HIGH 7.5

DescriptionNVD

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints

AnalysisAI

Technical ContextAI

Classified as CWE-200 (Information Exposure). Affects Aangine. An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download module, integration-persistence-service job listing module, portfolio-item-service data retrieval module endpoints

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

CVE-2025-67274 vulnerability details – vuln.today

Back

CVE-2025-67274

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code