Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46554 State: PUBLISHED Published: 2025-04-30T18:27:53.677Z Last Updated: 2025-04-30T18:59:16.789Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-862 Description: XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint. There is no filtering for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a privat
ng for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a private wiki. This issue has been patched in versions 14.10.22, 15.10.12, 16.4.3, and 16.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r5cr-xm48-97xp - https://github.com/xwiki/xwiki-platform/commit/37ecea84fdd053c33733c2ae9a0778bf98eae608 - https://github.com/xwiki/xwiki-platform/commit/a43e933ddeda17dad1772396e1757998260e9342 - https://github.com/xwiki/xwiki-platform/commit/c02ce7843a39851865b9d7b6132e32fdd21e3856 - https://jira.xwiki.org/browse/XWIKI-22424
CVE ID: CVE-2025-46556 State: PUBLISHED Published: 2025-11-04T00:20:28.193Z Last Updated: 2025-11-06T20:44:40.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: mantisbt Products: mantisbt Problem Types: CWE-770 Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes (tested with 4,788,761 characters) due to a lack of server-side validation of note length. Once such a note is added, the activity stream UI fails to render; therefore, new notes cannot be displayed, effectively breaking all future collaboration on the iss
m UI fails to render; therefore, new notes cannot be displayed, effectively breaking all future collaboration on the issue. This issue is fixed in version 2.27.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-r3jf-hm7q-qfw5 - https://github.com/mantisbt/mantisbt/commit/c99a41272532ba49b5c8dccb7797afead9864234 - https://github.com/mantisbt/mantisbt/commit/d5cec6bffb44d54bd412c186b9baa409b1aa4238 - https://github.com/mantisbt/mantisbt/commit/e9119c68b4a0eaa0bbde3deb121e81f5f7157361
CVE ID: CVE-2025-46557 State: PUBLISHED Published: 2025-04-30T18:27:39.895Z Last Updated: 2025-04-30T19:00:26.033Z Vendors: xwiki Products: xwiki-platform Problem Types: CWE-862 Description: XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to before 16.10.0-rc-1, a user who can access pages located in the XWiki space (by default, anyone) can access the page XWiki.Authentication.Administration and (unless an authenticator is set in xwiki.cfg) switch to another installed authenticator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authent
ator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authenticator extension was installed, it's not really possible to do anything for an attacker. Also, in most cases, if an SSO authenticator is installed and utilized (like OIDC or LDAP for example), the worst an attacker can do is break authentication by switching back to the standard authenticator (that's because it's impossible to login to a user which does not have a stored password, and that's usually what SSO authenticator produce). This issue has been patched in versions 15.10.14, 16.4.6, and 16.10.0-rc-1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
hed in versions 15.10.14, 16.4.6, and 16.10.0-rc-1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f9c6-2f9p-82jj - https://github.com/xwiki/xwiki-platform/commit/5efc31cea1501c9a5cb593566fea8b558ff32a2a - https://jira.xwiki.org/browse/XWIKI-22604
CVE ID: CVE-2025-46558 State: PUBLISHED Published: 2025-04-30T18:27:30.953Z Last Updated: 2025-04-30T19:01:32.321Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki-contrib Products: syntax-markdown Problem Types: CWE-79 Description: XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting (XSS) through HTML. In particular, using Markdown syntax, it's possible for any user to embed Javascript code that will then be executed on the browser of any other user visiting either the document or
er to embed Javascript code that will then be executed on the browser of any other user visiting either the document or the comment that contains it. In the instance that this code is executed by a user with admins or programming rights, this issue compromises the confidentiality, integrity and availability of the whole XWiki installation. This issue has been patched in version 8.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki-contrib/syntax-markdown/security/advisories/GHSA-8g2j-rhfh-hq3r - https://github.com/xwiki-contrib/syntax-markdown/commit/d136472d6e8a47981a0ede420a9096f88ffa5035 - https://jira.xwiki.org/browse/MARKDOWN-80
CVE ID: CVE-2025-46559 State: PUBLISHED Published: 2025-05-05T18:38:36.144Z Last Updated: 2025-05-05T18:44:52.723Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: misskey-dev Products: misskey Problem Types: CWE-22 Description: Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in `Mk:api` allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious AiScript code to prefix a URL with `../` to step out of the `/api` directory, thereby being able to make requests to other endpoints, such as `/
a URL with `../` to step out of the `/api` directory, thereby being able to make requests to other endpoints, such as `/files`, `/url`, and `/proxy`. Version 2025.4.1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/misskey-dev/misskey/security/advisories/GHSA-gmq6-738q-vjp2 - https://github.com/misskey-dev/misskey/commit/583df3ec63e25a1fd34def0dac13405396b8b663
CVE ID: CVE-2025-46560 State: PUBLISHED Published: 2025-04-30T00:24:53.750Z Last Updated: 2025-04-30T13:09:13.422Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: vllm-project Products: vllm Problem Types: CWE-1333 Description: vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., 
, 
) with repeated tokens based on precomputed lengths. Due to ​​inefficient list concatenation operations​​, the
|image_|>) with repeated tokens based on precomputed lengths. Due to ​​inefficient list concatenation operations​​, the algorithm exhibits ​​quadratic time complexity (O(n²))​​, allowing malicious actors to trigger resource exhaustion via specially crafted inputs. This issue has been patched in version 0.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-vc6m-hm49-g9qg - https://github.com/vllm-project/vllm/blob/8cac35ba435906fb7eb07e44fe1a8c26e8744f4e/vllm/model_executor/models/phi4mm.py#L1182-L1197
CVE ID: CVE-2025-46565 State: PUBLISHED Published: 2025-05-01T17:20:29.773Z Last Updated: 2025-05-02T17:38:55.291Z Vendors: vitejs Products: vite Problem Types: CWE-22 Description: Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. Only files that are under project root and are denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by defa
denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by default it includes .env, .env.*, *.{crt,pem} as such patterns). These patterns were able to bypass for files under `root` by using a combination of slash and dot (/.). This issue has been patched in versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-859w-5945-r5v3 - https://github.com/vitejs/vite/commit/c22c43de612eebb6c182dd67850c24e4fab8cacb
CVE ID: CVE-2025-46566 State: PUBLISHED Published: 2025-05-01T17:20:34.660Z Last Updated: 2025-05-02T17:38:02.983Z Vendors: dataease Products: dataease Problem Types: CWE-923, CWE-284 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/security/advisories/GHSA-hxw4-vpfp-frgv
CVE ID: CVE-2025-46567 State: PUBLISHED Published: 2025-05-01T17:20:41.020Z Last Updated: 2025-05-02T17:29:45.664Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: hiyouga Products: LLaMA-Factory Problem Types: CWE-502 Description: LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the LLaMA-Factory project. The script performs insecure deserialization using `torch.load()` on user-supplied `.bin` files from an input directory. An attacker can exploit this behavior by crafting a malicious `.bin` file that executes arbitrary commands during deserialization.
can exploit this behavior by crafting a malicious `.bin` file that executes arbitrary commands during deserialization. This issue has been patched in version 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hiyouga/LLaMA-Factory/security/advisories/GHSA-f2f7-gj54-6vpv - https://github.com/hiyouga/LLaMA-Factory/commit/2989d39239d2f46e584c1e1180ba46b9768afb2a
CVE ID: CVE-2025-46568 State: PUBLISHED Published: 2025-05-01T17:20:46.488Z Last Updated: 2025-05-02T13:33:46.987Z Vendors: Stirling-Tools Products: Stirling-PDF Problem Types: CWE-918 Description: Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerable to SSRF-induced arbitrary file read. WeasyPrint redefines a set of HTML tags, including img, embed, object, and others. The references to several files inside, allow the attachment of content from any webpage or local file to a PDF. This allows the attacker to read any file on the server, including sensitive files and configuration files.
e to a PDF. This allows the attacker to read any file on the server, including sensitive files and configuration files. All users utilizing this feature will be affected. This issue has been patched in version 0.45.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-998c-x8hx-737r
CVE ID: CVE-2025-46569 State: PUBLISHED Published: 2025-05-01T19:32:47.988Z Last Updated: 2025-05-02T18:08:19.750Z Vendors: open-policy-agent Products: opa Problem Types: CWE-863, CWE-94 Description: Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a single data document reference is constructed from the requested path. This query is then used for policy evaluation. A HTTP request path can be crafted in a way that injects Rego code into the constructed
hen used for policy evaluation. A HTTP request path can be crafted in a way that injects Rego code into the constructed query. The evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results. Furthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack. This issue has been patched in version 1.4.0. A workaround involves having network access to OPA’s RESTful APIs being limited to
ue has been patched in version 1.4.0. A workaround involves having network access to OPA’s RESTful APIs being limited to `localhost` and/or trusted networks, unless necessary for production reasons. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7 - https://github.com/open-policy-agent/opa/commit/ad2063247a14711882f18c387a511fc8094aa79c
CVE ID: CVE-2025-46570 State: PUBLISHED Published: 2025-05-29T16:32:42.794Z Last Updated: 2025-05-29T18:05:10.768Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: vllm-project Products: vllm Problem Types: CWE-208 Description: vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.9.0, when a new prompt is processed, if the PageAttention mechanism finds a matching prefix chunk, the prefill process speeds up, which is reflected in the TTFT (Time to First Token). These timing differences caused by matching chunks are significant enough to be recognized and exploited. This issue has been patched in version 0.9.0. Additional An
hunks are significant enough to be recognized and exploited. This issue has been patched in version 0.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-4qjh-9fv9-r85r - https://github.com/vllm-project/vllm/pull/17045 - https://github.com/vllm-project/vllm/commit/77073c77bc2006eb80ea6d5128f076f5e6c6f54f
CVE ID: CVE-2025-46571 State: PUBLISHED Published: 2025-05-05T18:45:29.718Z Last Updated: 2025-05-05T18:59:48.168Z Vendors: open-webui Products: open-webui Problem Types: CWE-79 Description: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the `/api/v1/files/` backend endpoint. This endpoint returns a file id, which can be used to open the file in the browser and trigger the JavaScript code in the user's browser. Under the default settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact o
fault settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact of this vulnerability. A link to such a file can be sent to an admin, and if clicked, will give the low-privileged user complete control over the admin's account, ultimately enabling RCE via functions. Version 0.6.6 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-webui/open-webui/security/advisories/GHSA-8gh5-qqh8-hq3x - https://github.com/open-webui/open-webui/commit/ef2aeb7c0eb976bac759e59ac359c94a5b8dc7e0 - https://github.com/open-webui/open-webui/blob/main/backend/open_webui/routers/files.py#L434-L438
CVE ID: CVE-2025-46572 State: PUBLISHED Published: 2025-05-06T20:18:26.379Z Last Updated: 2025-05-13T19:17:06.822Z Vendors: auth0 Products: passport-wsfed-saml2 Problem Types: CWE-287 Description: passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be
when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-wjmp-wphq-jvqf - https://github.com/auth0/passport-wsfed-saml2/commit/e5cf3cc2a53748207f7a81bfba9195c8efa94181
CVE ID: CVE-2025-46573 State: PUBLISHED Published: 2025-05-06T20:22:00.104Z Last Updated: 2025-05-07T15:34:04.601Z Vendors: auth0 Products: passport-wsfed-saml2 Problem Types: CWE-287 Description: passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Vers
provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-8gqj-226h-gm8r - https://github.com/auth0/passport-wsfed-saml2/commit/e5cf3cc2a53748207f7a81bfba9195c8efa94181
CVE ID: CVE-2025-46574 State: PUBLISHED Published: 2025-04-27T01:07:29.152Z Last Updated: 2025-04-28T15:34:18.287Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: ZTE Products: GoldenDB Problem Types: CWE-20 Description: There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392200
CVE ID: CVE-2025-46575 State: PUBLISHED Published: 2025-04-27T01:12:36.738Z Last Updated: 2025-04-28T15:34:10.224Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-209 Description: There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392205
CVE ID: CVE-2025-46576 State: PUBLISHED Published: 2025-04-27T01:16:37.005Z Last Updated: 2025-04-28T15:34:04.600Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: ZTE Products: GoldenDB Problem Types: CWE-269 Description: There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601464
CVE ID: CVE-2025-46577 State: PUBLISHED Published: 2025-04-27T01:21:27.266Z Last Updated: 2025-04-28T15:33:58.163Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-89 Description: There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601469
CVE ID: CVE-2025-46578 State: PUBLISHED Published: 2025-04-27T01:30:44.458Z Last Updated: 2025-04-28T15:33:52.903Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: GoldenDB Problem Types: CWE-89 Description: There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392210
CVE ID: CVE-2025-46579 State: PUBLISHED Published: 2025-04-27T01:34:35.034Z Last Updated: 2025-04-28T15:33:46.289Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: ZTE Products: GoldenDB Problem Types: CWE-94 Description: There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601474
CVE ID: CVE-2025-46580 State: PUBLISHED Published: 2025-04-27T01:49:16.856Z Last Updated: 2025-04-28T15:33:38.386Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: ZTE Products: GoldenDB Problem Types: CWE-400 Description: There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4828497866583347285
CVE ID: CVE-2025-46581 State: PUBLISHED Published: 2025-10-14T08:54:42.054Z Last Updated: 2025-10-14T15:30:20.230Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ZTE Products: ZXCDN Problem Types: CWE-94 Description: ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3747693852734546826
CVE ID: CVE-2025-46582 State: PUBLISHED Published: 2025-10-27T08:44:49.704Z Last Updated: 2025-10-27T15:58:25.984Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: ZTE Products: ZXMP M721 Problem Types: CWE-321 Description: A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2594779029512220847