Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8579 State: PUBLISHED Published: 2025-08-07T01:30:39.240Z Last Updated: 2025-08-07T13:32:48.487Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/407791462
CVE ID: CVE-2025-8580 State: PUBLISHED Published: 2025-08-07T01:30:39.448Z Last Updated: 2025-08-07T13:31:14.634Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/411544197
CVE ID: CVE-2025-8581 State: PUBLISHED Published: 2025-08-07T01:30:39.671Z Last Updated: 2025-08-07T13:29:32.387Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/416942878
CVE ID: CVE-2025-8582 State: PUBLISHED Published: 2025-08-07T01:30:39.884Z Last Updated: 2025-08-11T13:29:12.773Z Vendors: Google Products: Chrome Problem Types: CWE-20 Description: Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/40089450
CVE ID: CVE-2025-8583 State: PUBLISHED Published: 2025-08-07T01:30:40.083Z Last Updated: 2025-08-07T13:20:06.480Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/373794472
CVE ID: CVE-2025-8584 State: PUBLISHED Published: 2025-08-05T16:32:06.484Z Last Updated: 2025-08-05T17:53:41.456Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: libav Problem Types: CWE-476, CWE-404 Description: A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong p
xploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318817 - https://vuldb.com/?ctiid.318817 - https://vuldb.com/?submit.621824 - https://trac.ffmpeg.org/ticket/11679 - https://drive.google.com/file/d/1OwDNHuTbZFNTDX9afmvez_old3oRC7dM/view?usp=sharing
CVE ID: CVE-2025-8585 State: PUBLISHED Published: 2025-08-05T17:02:06.134Z Last Updated: 2025-08-06T15:09:05.365Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: libav Problem Types: CWE-415, CWE-119 Description: A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability on
the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318818 - https://vuldb.com/?ctiid.318818 - https://vuldb.com/?submit.621825 - https://trac.ffmpeg.org/ticket/11680 - https://drive.google.com/file/d/1I4VVXGys156UdeSTgya_GGxLZxwuxUPw/view?usp=sharing
CVE ID: CVE-2025-8586 State: PUBLISHED Published: 2025-08-05T17:32:05.219Z Last Updated: 2025-08-06T15:10:03.799Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: libav Problem Types: CWE-476, CWE-404 Description: A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wro
he exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318819 - https://vuldb.com/?ctiid.318819 - https://vuldb.com/?submit.621826 - https://trac.ffmpeg.org/ticket/11681 - https://drive.google.com/file/d/1CX1GZUyJVzyDDGLVa8FG58XUt_30kHKT/view?usp=sharing
CVE ID: CVE-2025-8588 State: PUBLISHED Published: 2025-10-25T05:31:20.754Z Last Updated: 2025-10-27T15:51:04.138Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: publishpress Products: Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks Problem Types: CWE-79 Description: The Gutenberg Blocks – PublishPress Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Marker Title' and 'Marker Description' parameters for the Maps block in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level access a
put sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/428d44c2-ef30-4d34-8f62-030af9931441?source=cve - https://plugins.trac.wordpress.org/browser/advanced-gutenberg/trunk/assets/blocks/map/frontend.js#L14 - https://github.com/publishpress/PublishPress-Blocks/issues/1566
CVE ID: CVE-2025-8592 State: PUBLISHED Published: 2025-08-21T05:28:13.480Z Last Updated: 2025-08-21T15:45:46.226Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: wpzoom Products: Inspiro Problem Types: CWE-352 Description: The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on the inspiro_install_plugin() function. This makes it possible for unauthenticated attackers to install plugins from the repository via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst
est granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/20f461d1-aeb2-4913-804c-6a081e48765a?source=cve - https://themes.trac.wordpress.org/browser/inspiro/2.1.1/inc/admin/pluginInstaller/class-inspiro-plugin-installer.php#L67 - https://research.cleantalk.org/cve-2025-8592/ - https://themes.trac.wordpress.org/ticket/228813 - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=284043%40inspiro%2F2.1.3&old=282419%40inspiro%2F2.1.2
CVE ID: CVE-2025-8593 State: PUBLISHED Published: 2025-10-11T09:28:40.438Z Last Updated: 2025-10-14T18:45:15.691Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: westerndeal Products: GSheetConnector For Gravity Forms Problem Types: CWE-862 Description: The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'install_plugin' function. This makes it possible for authenticated attackers, with subscriber-level access and above to install plugins on the target site and potentially achieve arbitrary code execution on the server under
ess and above to install plugins on the target site and potentially achieve arbitrary code execution on the server under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7266ce6-2853-4c5d-9e36-8c5b7418b072?source=cve - https://plugins.trac.wordpress.org/browser/gsheetconnector-gravity-forms/tags/1.3.23/includes/class-gravityform-gs-service.php#L128 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3354113%40gsheetconnector-gravity-forms&new=3354113%40gsheetconnector-gravity-forms&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8594 State: PUBLISHED Published: 2025-10-14T06:00:07.251Z Last Updated: 2025-10-14T13:39:01.218Z Vendors: Unknown Products: Pz-LinkCard Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/17104590-d84e-41b7-83ac-9b15fcfb537a/
CVE ID: CVE-2025-8595 State: PUBLISHED Published: 2025-08-06T02:24:11.563Z Last Updated: 2025-08-06T13:40:34.249Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: themegrill Products: Zakra Problem Types: CWE-862 Description: The Zakra theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4da012dc-7e58-479a-813e-762eb28297bf?source=cve - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=281307%40zakra%2F4.1.6&old=276128%40zakra%2F4.1.5 - https://research.cleantalk.org/cve-2025-8595/
CVE ID: CVE-2025-8597 State: PUBLISHED Published: 2025-08-26T12:23:01.180Z Last Updated: 2025-08-26T13:54:06.544Z Vendors: MacVim Products: MacVim Problem Types: CWE-497 Description: MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access (e.g. via a malicious application) to attach a debugger, read or modify the process memory, inject code in the application's context despite being signed with Hardened Runtime and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted permi
resource access is limited to previously granted permissions by the user. Access to other resources beyond granted permissions requires user interaction with a system prompt asking for permission. According to Apple documentation, when a non-root user runs an app with the debugging tool entitlement, the system presents an authorization dialog asking for a system administrator's credentials. Since there is no prompt when the target process has "get-task-allow" entitlement, the presence of this entitlement was decided to be treated as a vulnerability because it removes one step needed to perform an attack. This issue was fixed in build r181.2 Additional Analyst Notes: - CISA ADP Vulnrichment:
ep needed to perform an attack. This issue was fixed in build r181.2 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/tcc-bypass/ - https://github.com/macvim-dev/macvim/pull/1585
CVE ID: CVE-2025-8603 State: PUBLISHED Published: 2025-08-28T03:42:44.078Z Last Updated: 2025-08-28T14:49:25.800Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: unitecms Products: Unlimited Elements For Elementor Problem Types: CWE-79 Description: The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.148 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected
-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/40f0510a-06e3-40a9-9b93-0296f524f94a?source=cve - https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/assets_libraries/unitegallery/js/unitegallery.min.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349280%40unlimited-elements-for-elementor&new=3349280%40unlimited-elements-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8604 State: PUBLISHED Published: 2025-08-15T07:24:40.444Z Last Updated: 2025-08-15T16:34:32.461Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wptb Products: WP Table Builder – WordPress Table Plugin Problem Types: CWE-79 Description: The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wptb shortcode in all versions up to, and including, 2.0.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages t
ossible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ac2f6549-016f-494d-99a4-52a1527f1fd2?source=cve - https://plugins.trac.wordpress.org/browser/wp-table-builder/trunk/inc/admin/class-tables.php#L153 - https://wordpress.org/plugins/wp-table-builder - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3341699%40wp-table-builder%2Ftrunk&old=3336979%40wp-table-builder%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8605 State: PUBLISHED Published: 2025-11-18T08:27:33.788Z Last Updated: 2025-11-18T14:27:21.105Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codeyatri Products: Gutenify – Visual Site Builder Blocks & Site Templates. Problem Types: CWE-79 Description: The Gutenify – Visual Site Builder Blocks & Site Templates. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in all versions up to, and including, 1.5.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to injec
pplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/853b86ca-0231-4b1c-b1d2-b8c23dbdc3c5?source=cve - https://wordpress.org/plugins/gutenify/#developers
CVE ID: CVE-2025-8606 State: PUBLISHED Published: 2025-10-11T09:28:41.262Z Last Updated: 2025-10-14T18:45:03.472Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: westerndeal Products: GSheetConnector For Gravity Forms Problem Types: CWE-352 Description: The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This makes it possible for attackers to trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clic
trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clicking on a malicious link or visiting a compromised page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d5c48de7-20f6-408e-b4fb-f3d5d7ab272f?source=cve - https://plugins.trac.wordpress.org/browser/gsheetconnector-gravity-forms/tags/1.3.23/includes/class-gravityform-gs-service.php#L154 - https://plugins.trac.wordpress.org/browser/gsheetconnector-gravity-forms/tags/1.3.23/includes/class-gravityform-gs-service.php#L39 - https://plugins.trac.wordpress.org/changeset/3339653
CVE ID: CVE-2025-8607 State: PUBLISHED Published: 2025-08-21T05:28:14.610Z Last Updated: 2025-08-21T14:53:51.305Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: amans2k Products: SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) Problem Types: CWE-79 Description: The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block's attributes in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-le
and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c88c6ad8-d4bd-4785-a6e7-e5034c58158b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3347030%40slingblocks%2Ftrunk&old=3275990%40slingblocks%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8608 State: PUBLISHED Published: 2025-09-30T03:35:32.244Z Last Updated: 2025-09-30T15:36:49.865Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mihdan Products: Mihdan: Elementor Yandex Maps Problem Types: CWE-79 Description: The Mihdan: Elementor Yandex Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in all versions up to, and including, 1.6.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whe
cated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d09a53cc-1773-467d-a9c7-72f343ed02a4?source=cve - https://plugins.trac.wordpress.org/browser/mihdan-elementor-yandex-maps/trunk/includes/class-widget.php#L1437
CVE ID: CVE-2025-8609 State: PUBLISHED Published: 2025-11-18T08:27:35.296Z Last Updated: 2025-11-18T14:24:34.927Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rometheme Products: RTMKit Problem Types: CWE-79 Description: The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion Block's attributes in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a use
kers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a4601d9e-02bb-4b27-b16e-7cfc0fc19919?source=cve - https://plugins.trac.wordpress.org/browser/rometheme-for-elementor/trunk/widgets/rkit_widgets/rkit_image_accordion.php#L1032 - https://plugins.trac.wordpress.org/changeset/3369481/rometheme-for-elementor/trunk/widgets/rkit_widgets/rkit_image_accordion.php
CVE ID: CVE-2025-8610 State: PUBLISHED Published: 2025-08-20T16:25:52.319Z Last Updated: 2025-08-20T18:43:34.742Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AOMEI Products: Cyber Backup Problem Types: CWE-306 Description: AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the StorageNode service, which listens on TCP port 9075 by default. The issue results from the lack of authentication prior
StorageNode service, which listens on TCP port 9075 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-26156. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-808/