CVE-2025-43720 | Headwind MDM up to 5.33.0 Configuration Profile improper authorization

July 21, 2025 Yanac

A vulnerability classified as critical was found in Headwind MDM up to 5.33.0. This vulnerability affects unknown code of the component Configuration Profile Handler. The manipulation leads to improper authorization.

This vulnerability was named CVE-2025-43720. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More