Approved changes feed: RSS · Atom

cpe:2.3:a:restaurant_brands_international:assistant_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRestaurant Brands International (7932167a-a26f-5d71-85a4-b3e8b299c7c7)
ProductAssistant Platform (24207c1c-6b32-532c-b8e2-6c09603b4504)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62651 vulnerable 2026-06-08 07:39:16.369408 Details available
MEDIUM (6.5)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 does not implement access control for the bathroom rating interface.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:04:30.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62650 vulnerable 2026-06-08 07:39:16.368872 Details available
HIGH (8.3)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:04:44.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62649 vulnerable 2026-06-08 07:39:16.368432 Details available
MEDIUM (5.8)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:00.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62648 vulnerable 2026-06-08 07:39:16.367947 Details available
MEDIUM (6.4)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to adjust Drive Thru speaker audio volume.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:19.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62647 vulnerable 2026-06-08 07:39:16.367576 Details available
MEDIUM (5)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:52.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62646 vulnerable 2026-06-08 07:39:16.367316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62645 vulnerable 2026-06-08 07:39:16.366940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62644 vulnerable 2026-06-08 07:39:16.366663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62643 vulnerable 2026-06-08 07:39:16.366242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62642 vulnerable 2026-06-08 07:39:16.364887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.