Exploit for CVE-2026-25505

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue has been patched in version 0.1.7.

Published: 2026-02-04

CVSS: 9.8

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Exploit for CVE-2026-25505 here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

Check our portfolio:

https://veletacapital.com/exploit-580-cve-2026-2775/

https://veletacapital.com/exploit-187-cve-2026-2166/

https://veletacapital.com/exploit-273-cve-2020-37176/

https://veletacapital.com/exploit-216-cve-2026-2220/

https://veletacapital.com/exploit-264-cve-2026-2249/