Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user.
CVSS 4.0HIGH 8.6·Network·Low privileges·No interaction·EPSS 0.00328·Published 2025-12-01·Fixed in 3.6.17CWE-863