Sismics Teedy

• CVE-2025-11853 Medium 6.3 Sismics Teedy API Endpoint file access control 0.5%
• CVE-2025-22963 High 7.5 Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin. 0.3%