DData Illusion Zumbrunn

Products

Exploited and recent CVEs

• CVE-2025-15479 Medium 5.1 NGSurvey Enterprise 3.6.4 incorrect authorization exposes other users’ API keys and personal data 0.2%
• CVE-2025-13829 High 8.6 Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: * APIKEY 0.3%