Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
API requests to the AI suggestion endpoints, users could target specific restricted topics. The AI model’s responses then disclosed information that the authenticated user couldn’t normally access. This issue is fixed in version 3.5.1. To workaround this issue, users can restrict group access to the AI helper feature through the "composer_ai_helper_allowed_groups" and "post_ai_helper_allowed_groups" site settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/discourse/discourse/security/advisories/GHSA-32v2-x274-vfhr - https://github.com/discourse/discourse/commit/28d569cae9b33cd55d647bf41806106e33d975c9
CVE ID: CVE-2025-58056 State: PUBLISHED Published: 2025-09-03T20:56:50.732Z Last Updated: 2025-09-05T18:41:21.428Z Vendors: netty Products: netty Problem Types: CWE-444 Description: Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters (LF) as a chunk-size line terminator, regardless of a preceding carriage return (CR), instead of requiring CRLF per HTTP/1.1 standards. When combined with reverse proxies that parse LF differently (treating it as part of the chunk extension), attacke
ards. When combined with reverse proxies that parse LF differently (treating it as part of the chunk extension), attackers can craft requests that the proxy sees as one request but Netty processes as two, enabling request smuggling attacks. This is fixed in versions 4.1.125.Final and 4.2.5.Final. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49 - https://github.com/JLLeitschuh/unCVEed/issues/1 - https://github.com/netty/netty/issues/15522 - https://github.com/netty/netty/pull/15611 - https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284 - https://datatracker.ietf.org/doc/html/rfc91
s://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284 - https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding - https://w4ke.info/2025/06/18/funky-chunks.html
CVE ID: CVE-2025-58057 State: PUBLISHED Published: 2025-09-03T21:46:49.928Z Last Updated: 2025-09-04T19:59:23.458Z Vendors: netty Products: netty Problem Types: CWE-409 Description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted input, BrotliDecoder and certain other decompression decoders will allocate a large number of reachable byte buffers, which can lead to denial of service. BrotliDecoder.decompress has no limit in how often it calls pull,
le byte buffers, which can lead to denial of service. BrotliDecoder.decompress has no limit in how often it calls pull, decompressing data 64K bytes at a time. The buffers are saved in the output list, and remain reachable until OOM is hit. This is fixed in versions 4.1.125.Final of netty-codec and 4.2.5.Final of netty-codec-compression. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj - https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d
CVE ID: CVE-2025-58058 State: PUBLISHED Published: 2025-08-28T21:54:05.561Z Last Updated: 2025-08-29T13:23:07.497Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ulikunitz Products: xz Problem Types: CWE-770 Description: xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to de
ecoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9 - https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2
CVE ID: CVE-2025-58059 State: PUBLISHED Published: 2025-08-28T17:50:50.585Z Last Updated: 2025-08-28T18:15:17.669Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: valtimo-platform Products: valtimo-backend-libraries Problem Types: CWE-78, CWE-200 Description: Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on the application host, inspecting and extracting data from the host environment or app
limited to: running executables on the application host, inspecting and extracting data from the host environment or application properties, spring beans (application context, database pooling). The following conditions have to be met in order to perform this attack: the user must be logged in, have the admin role, and must have some knowledge about running scripts via a the Camunda/Operator engine. Version 12.16.0 and 13.1.2 have been patched. It is strongly advised to upgrade. If no scripting is needed in any of the processes, it could be possible to disable it altogether via the ProcessEngineConfiguration. However, this workaround could lead to unexpected side-effects. Additional Analyst
via the ProcessEngineConfiguration. However, this workaround could lead to unexpected side-effects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-w48j-pp7j-fj55 - https://github.com/valtimo-platform/valtimo-backend-libraries/commit/45eb60b0b2df5964fb9917295d0dceb1fff8dd85
CVE ID: CVE-2025-58060 State: PUBLISHED Published: 2025-09-11T17:06:32.899Z Last Updated: 2025-11-04T21:13:22.294Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: OpenPrinting Products: cups Problem Types: CWE-287 Description: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue. Additional Analyst
iguration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq - https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221
CVE ID: CVE-2025-58061 State: PUBLISHED Published: 2025-08-28T22:03:35.698Z Last Updated: 2025-08-29T13:24:03.484Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: openebs Products: rawfile-localpv Problem Types: CWE-200 Description: OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The rawfile-localpv storage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the director
orage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the directory and data in it are world-readable. It allows non-privileged users to access the whole persistent volume data, and those can include sensitive information such as a whole database if the Kubernetes tenants are running MySQL or PostgreSQL in a container so it could lead to a database breach. This issue has been patched in version 0.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openebs/rawfile-localpv/security/advisories/GHSA-wh95-vw4r-xwx4
CVE ID: CVE-2025-58062 State: PUBLISHED Published: 2025-08-28T22:14:01.744Z Last Updated: 2025-08-29T13:24:44.632Z Vendors: LSTM-Kirigaya Products: openmcp-client Problem Types: CWE-78 Description: LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in the open() invocation, leading to client system compromise. This issue has been patched in version 0.1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LSTM-Kirigaya/op
in version 0.1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LSTM-Kirigaya/openmcp-client/security/advisories/GHSA-43m4-p3rv-c4v8 - https://github.com/LSTM-Kirigaya/openmcp-client/commit/9c3799d6ffae8d0cdfab25a53af75e1afc85f6c3 - https://drive.google.com/file/d/1lSqFkc412aX6a_fjmNfzXsJKE7b8jPqD/view?usp=sharing
CVE ID: CVE-2025-58063 State: PUBLISHED Published: 2025-09-09T19:27:18.124Z Last Updated: 2025-09-10T14:26:13.850Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: coredns Products: coredns Problem Types: CWE-681 Description: CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affected services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and
services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and uses them as TTL values. Large lease IDs become very large TTLs when cast to uint32. This enables cache pinning attacks. Version 1.12.4 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9 - https://github.com/coredns/coredns/commit/e1768a5d272e9da649dfb8588595e5c6e4e640bf
CVE ID: CVE-2025-58064 State: PUBLISHED Published: 2025-09-03T22:02:53.296Z Last Updated: 2025-09-04T20:03:46.927Z Vendors: ckeditor Products: ckeditor5 Problem Types: CWE-79 Description: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting (XSS) vulnerability. Ability to exploit could be triggered by a specific user action (leading to unauthorized JavaScript code execution) if the attacker managed to insert a malicious content into the editor, which might happen with a very specific editor configuration. This vulnerability affects installations wh
to the editor, which might happen with a very specific editor configuration. This vulnerability affects installations where the editor configuration meets one of the following criteria: the HTML embed plugin is enabled, or there is a custom plugin introducing an editable element where view RawElement is enabled. This issue is fixed in versions 45.2.2 and 46.0.3 of both ckeditor5 and ckeditor5-clipboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-x9gp-vjh6-3wv6 - https://github.com/ckeditor/ckeditor5/commit/b210e90c6cf84e662ef6c7daf93a92355a961bf2
CVE ID: CVE-2025-58065 State: PUBLISHED Published: 2025-09-11T17:55:48.520Z Last Updated: 2025-09-11T19:22:16.705Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: dpgaspar Products: Flask-AppBuilder Problem Types: CWE-287 Description: Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface. This allows an enabled user to reset their password and be able to create JWT tokens even after the user is disabled on the authentic
n enabled user to reset their password and be able to create JWT tokens even after the user is disabled on the authentication provider. Users should upgrade to Flask-AppBuilder version 4.8.1 or later to receive a fix. If immediate upgrade is not possible, manually disable password reset routes in the application configuration; implement additional access controls at the web server or proxy level to block access to the reset my password URL; and/or monitor for suspicious password reset attempts from disabled accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-765j-9r45-w2q2 - https://github.com/dpgasp
nces: - https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-765j-9r45-w2q2 - https://github.com/dpgaspar/Flask-AppBuilder/pull/2384 - https://github.com/dpgaspar/Flask-AppBuilder/commit/a942a9cc5775752f9a02f97fd8198dd288fa93ee - https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.8.1
CVE ID: CVE-2025-58066 State: PUBLISHED Published: 2025-08-29T20:54:13.174Z Last Updated: 2025-09-02T13:53:59.838Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: pendulum-project Products: ntpd-rs Problem Types: CWE-406 Description: nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as
d-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-4855-q42w-5vr4 - https://github.com/pendulum-project/ntpd-rs/commit/da37cf167736cbd4d7804b1ed7ceb572468298e0
CVE ID: CVE-2025-58067 State: PUBLISHED Published: 2025-08-29T21:05:22.209Z Last Updated: 2025-09-02T13:52:49.721Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: basecamp Products: google_sign_in Problem Types: CWE-601 Description: Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "proceed_to" value in the session store is set to a protocol-relative URL. Normally the value of this URL is only written and read by the library or the calling application. However, it may be possible to set this session value from a malicious site with a form submission. Any Rai
application. However, it may be possible to set this session value from a malicious site with a form submission. Any Rails applications using the google_sign_in gem may be vulnerable, if this vector can be chained with another attack that is able to modify the OAuth2 request parameters. This issue has been patched in version 1.3.1. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/basecamp/google_sign_in/security/advisories/GHSA-5jch-xhw4-r43v - https://github.com/basecamp/google_sign_in/pull/75 - https://github.com/basecamp/google_sign_in/commit/e97aef4626b1bcbd2c6f01f7dd25f12ac855d4cc - https://github.com/basecamp/google_sign_in/r
m/basecamp/google_sign_in/commit/e97aef4626b1bcbd2c6f01f7dd25f12ac855d4cc - https://github.com/basecamp/google_sign_in/releases/tag/v1.3.1
CVE ID: CVE-2025-58068 State: PUBLISHED Published: 2025-08-29T21:12:24.534Z Last Updated: 2025-11-03T18:13:48.690Z Vendors: eventlet Products: eventlet Problem Types: CWE-444 Description: Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end security controls, launch targeted attacks against active site users, and poison web caches. This problem has been patched in Eventlet 0.40.3 by dropping trailers which is a breaking change if a backend behind eventlet.wsgi proxy requires trailers. A w
et 0.40.3 by dropping trailers which is a breaking change if a backend behind eventlet.wsgi proxy requires trailers. A workaround involves not using eventlet.wsgi facing untrusted clients. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7 - https://github.com/eventlet/eventlet/pull/1062 - https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb
CVE ID: CVE-2025-58069 State: PUBLISHED Published: 2025-09-23T22:04:58.449Z Last Updated: 2025-09-24T14:08:24.132Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: AutomationDirect Products: CLICK PLUS C0-0x CPU firmware, CLICK PLUS C0-1x CPU firmware, CLICK PLUS C2-x CPU firmware Problem Types: CWE-321 Description: The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/i
a new KOPS session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01 - https://www.automationdirect.com/support/software-downloads
CVE ID: CVE-2025-58070 State: PUBLISHED Published: 2025-10-24T05:17:23.369Z Last Updated: 2025-10-24T12:31:28.420Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Implem Inc. Products: Pleasanter Problem Types: CWE-79 Description: Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pleasanter.org/archives/vulnerability-update-20251024 - https://jvn.jp/en/jp/JVN20611740/
CVE ID: CVE-2025-58071 State: PUBLISHED Published: 2025-10-15T15:19:46.470Z Last Updated: 2025-10-16T03:57:04.045Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next CNF, BIG-IP Next for Kubernetes Problem Types: CWE-457 Description: When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000156746
CVE ID: CVE-2025-58072 State: PUBLISHED Published: 2025-08-28T08:28:33.132Z Last Updated: 2025-08-28T13:44:05.383Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: DOS Co., Ltd. Products: SS1, SS1 Cloud Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2025/08/250827.html - https://jvn.jp/en/jp/JVN99577552/
CVE ID: CVE-2025-58073 State: PUBLISHED Published: 2025-10-16T08:44:26.158Z Last Updated: 2025-10-22T03:55:15.316Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the OAuth state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-58075 State: PUBLISHED Published: 2025-10-16T08:20:06.939Z Last Updated: 2025-10-22T03:55:13.916Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the RelayState Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-58078 State: PUBLISHED Published: 2025-10-23T22:09:03.834Z Last Updated: 2025-10-24T14:28:56.329Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: AutomationDirect Products: Productivity Suite, Productivity 3000 P3-622 CPU, Productivity 3000 P3-550E CPU, Productivity 3000 P3-530 CPU, Productivity 2000 P2-622 CPU, Productivity 2000 P2-550 CPU, Productivity 1000 P1-550 CPU, Productivity 1000 P1-540 CPU Problem Types: CWE-23 Description: A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simu
4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and write files with arbitrary data on the target machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 - https://www.automationdirect.com/support/software-downloads - https://support.automationdirect.com/docs/securityconsiderations.pdf - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json
CVE ID: CVE-2025-58079 State: PUBLISHED Published: 2025-10-16T10:03:35.640Z Last Updated: 2025-10-16T13:41:37.399Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: NEOJAPAN Inc. Products: desknet's NEO Problem Types: CWE-424 Description: Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.desknets.com/neo/support/mainte/17475/ - https://jvn.jp/en/jp/JVN90757550/