Approved changes feed: RSS · Atom

cpe:2.3:a:rbi:restaurant_brands_international_assistant:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRbi (e69e4dbd-572d-57b8-abc8-198d255f42e0)
ProductRestaurant Brands International Assistant (b54377e7-d8f6-5e79-8f63-ba4521630efa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62651 vulnerable 2026-06-08 07:39:16.369519 Details available
MEDIUM (6.5)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 does not implement access control for the bathroom rating interface.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:04:30.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62650 vulnerable 2026-06-08 07:39:16.368998 Details available
HIGH (8.3)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:04:44.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62649 vulnerable 2026-06-08 07:39:16.368561 Details available
MEDIUM (5.8)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:00.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62648 vulnerable 2026-06-08 07:39:16.367976 Details available
MEDIUM (6.4)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to adjust Drive Thru speaker audio volume.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:19.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62647 vulnerable 2026-06-08 07:39:16.367721 Details available
MEDIUM (5)
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path.
Published: 2025-10-17T00:00:00.000Z
Updated: 2025-10-29T15:05:52.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62646 vulnerable 2026-06-08 07:39:16.367349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62645 vulnerable 2026-06-08 07:39:16.366973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62644 vulnerable 2026-06-08 07:39:16.366702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62643 vulnerable 2026-06-08 07:39:16.366283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62642 vulnerable 2026-06-08 07:39:16.365900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.