deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-48025
Published: 2025-10-20
Description: In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-48025/
CVE: CVE-2025-60856
Published: 2025-10-20
Description: Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges. NOTE: this is disputed by the Supplier because of "certain restrictions on users privately connecting serial port cables" and because "the root user has a password and it meets the requirements of password security complexity."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306, CWE-922
References: https://cybermaya.in/posts/Post-46/; https://reolink.com/download-center/
CVE: CVE-2025-62429
Published: 2025-10-20
Description: ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is not performed, and by injecting malicious code an attacker can execute arbitrary PHP code. This allows an attacker to achieve RCE. This issue has been resolved in version 5.5.2 #147.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/MacWarrior/clipbucket-v5/commit/e81bac602c871bb1ad971884003a3a496a2ab50b; https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.2-%23147; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmq
CVE: CVE-2025-6515
Published: 2025-10-20
Description: The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses from the oatpp-mcp server.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-330
References: https://research.jfrog.com/vulnerabilities/oatpp-mcp-prompt-hijacking-jfsa-2[PII_REDACTED]91/
CVE: CVE-2025-9574
Published: 2025-10-20
Description: Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . 

All firmware versions with the Serial Number from 2000 to 5166
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://search.abb.com/library/Download.aspx?DocumentID=4TZ[PII_REDACTED]7&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE: CVE-2025-11979
Published: 2025-10-20
Description: An authorized user may crash the MongoDB server by causing buffer over-read. This can be done by issuing a DDL operation while queries are being issued, under some conditions. This issue affects MongoDB Server v7.0 versions prior to 7.0.25, MongoDB Server v8.0 versions prior to 8.0.15, and MongoDB Server version 8.2.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: https://jira.mongodb.org/browse/SERVER-105873
CVE: CVE-2025-3465
Published: 2025-10-20
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://search.abb.com/library/Download.aspx?DocumentID=3KXG200000R4801&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2025-47900
Published: 2025-10-20
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.gruppotim.it/en/footer/TIM-red-team.html; https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-remote-command-execution
CVE: CVE-2025-47901
Published: 2025-10-20
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.gruppotim.it/en/footer/TIM-red-team.html; https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-remote-command-execution-47901
CVE: CVE-2025-47902
Published: 2025-10-20
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.gruppotim.it/en/footer/TIM-red-team.html; https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-remote-sql-command-injection-47902
CVE: CVE-2025-55086
Published: 2025-10-20
Description: In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-1285, CWE-125
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-99pw-cp79-2j5j
CVE: CVE-2025-62509
Published: 2025-10-20
Description: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to version 1.4.0, a business logic flaw in FileRise’s file/folder handling allows low-privilege users to perform unauthorized operations (view/delete/modify) on files created by other users. The root cause was inferring ownership/visibility from folder names (e.g., a folder named after a username) and missing server-side authorization/ownership checks across file operation endpoints. This amounted to an IDOR pattern: an attacker could operate on resources identified only by predictable names. This issue has been patched in version 1.4.0 and further hardened in version 1.5.0. A workaround for this issue involves restricting non-admin users to read-only or disable delete/rename APIs server-side, avoid creating top-level folders named after other usernames, and adding server-side checks that verify ownership before delete/rename/move.
CVSS Score: 8.1 (HIGH)
CWE: CWE-280, CWE-284
References: https://github.com/error311/FileRise/commit/25ce6a76beb60950359c0304765ad91a8aff8ad8; https://github.com/error311/FileRise/issues/53; https://github.com/error311/FileRise/security/advisories/GHSA-6p87-q9rh-95wh
CVE: CVE-2025-62510
Published: 2025-10-20
Description: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In version 1.4.0, a regression allowed folder visibility/ownership to be inferred from folder names. Low-privilege users could see or interact with folders matching their username and, in some cases, other users’ content. This issue has been patched in version 1.5.0, where it introduces explicit per-folder ACLs (owners/read/write/share/read_own) and strict server-side checks across list, read, write, share, rename, copy/move, zip, and WebDAV paths.
CVSS Score: 8.1 (HIGH)
CWE: CWE-280, CWE-284
References: https://github.com/error311/FileRise/commit/b6d86b78967baa2f5a1e191903fc4df13998d87f; https://github.com/error311/FileRise/issues/55; https://github.com/error311/FileRise/security/advisories/GHSA-jm96-2w52-5qjj
CVE: CVE-2025-62693
Published: 2025-10-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39.
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/Ia406630dbac5ef9a9aed3f402f0ba6e434a6bcf2; https://phabricator.wikimedia.org/T399583
CVE: CVE-2025-62698
Published: 2025-10-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ExternalGuidance allows Stored XSS.This issue affects Mediawiki - ExternalGuidance: from master before 1.39.
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I8bfb3c2766982f6633f47ed35720d4d9f51da71d; https://phabricator.wikimedia.org/T399662
CVE: CVE-2025-62700
Published: 2025-10-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste: from master before 1.39.
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I10e205e3027d4772b2cd9801647fc6c171e4b35b; https://phabricator.wikimedia.org/T399658
CVE: CVE-2025-5517
Published: 2025-10-20
Description: Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8948&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE: CVE-2025-61488
Published: 2025-10-20
Description: An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrap_image.php component and the imageURL parameter
CVSS Score: 7.6 (HIGH)
CWE: CWE-94, CWE-918
References: https://github.com/slims/slims9_bulian/issues/299
CVE: CVE-2025-62522
Published: 2025-10-20
Description: Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by server.fs.deny were sent if the URL ended with \ when the dev server is running on Windows. Only apps explicitly exposing the Vite dev server to the network and running the dev server on Windows were affected. This issue has been patched in versions 5.4.21, 6.4.1, 7.0.8, and 7.1.11.
CWE: CWE-22
References: https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed; https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7
CVE: CVE-2025-62527
Published: 2025-10-20
Description: Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-15
References: https://github.com/remram44/taguette/security/advisories/GHSA-7rc8-5c8q-jr6j; https://gitlab.com/remram44/taguette/-/issues/331
CVE: CVE-2025-62528
Published: 2025-10-20
Description: Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/remram44/taguette/security/advisories/GHSA-g9qw-g6rv-3889; https://gitlab.com/remram44/taguette/-/issues/330
CVE: CVE-2025-62697
Published: 2025-10-20
Description: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.
CWE: CWE-74
References: https://gerrit.wikimedia.org/r/q/I338288e756de4e58a3f1f02a9c205b37f4927935; https://phabricator.wikimedia.org/T399724
CVE: CVE-2025-8048
Published: 2025-10-20
Description: External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file
path and then download the specified file from the system by requesting the
stored document ID.







This issue affects Flipper: 3.1.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850531
CVE: CVE-2025-8049
Published: 2025-10-20
Description: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application.

This issue affects Flipper: 3.1.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1220
References: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850530
CVE: CVE-2025-8051
Published: 2025-10-20
Description: Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. 

The vulnerability could allow a user to access files hosted on the server.

This issue affects Flipper: 3.1.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-35
References: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850527
CVE: CVE-2025-8052
Published: 2025-10-20
Description: SQL Injection vulnerability in opentext Flipper allows SQL Injection. 

The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor.

This issue affects Flipper: 3.1.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-564
References: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850533
CVE: CVE-2025-8053
Published: 2025-10-20
Description: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges.

This issue affects Flipper: 3.1.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1220
References: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850532
CVE: CVE-2025-60781
Published: 2025-10-20
Description: PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gold-textbook-8ff.notion.site/php-education-management-Stored-XSS-Vulnerability-25985e97f35380018b9af0f4b678002c?pvs=73
CVE: CVE-2025-60783
Published: 2025-10-20
Description: There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639; https://gold-textbook-8ff.notion.site/Restaurant-Management-System-DBMS-project-SQL-injection-25985e97f35380b2922ad4ebe8c47639?pvs=73
CVE: CVE-2025-61301
Published: 2025-10-20
Description: Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits or orjson recursion errors when the sample executes in the sandbox.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://capev2.com; https://github.com/eGkritsis/CVE-2025-61301; https://github.com/kevoreilly/CAPEv2
CVE: CVE-2025-61303
Published: 2025-10-20
Description: Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources. As a result, key malicious behavior, including PowerShell execution and reverse shell activity, may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandboxed analysis results.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://github.com/eGkritsis/CVE-2025-61303
CVE: CVE-2025-62656
Published: 2025-10-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44.
CWE: CWE-79
References: https://phabricator.wikimedia.org/T403291
CVE: CVE-2025-62657
Published: 2025-10-20
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44.
CWE: CWE-79
References: https://phabricator.wikimedia.org/T405357
CVE: CVE-2025-62658
Published: 2025-10-20
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44.
CWE: CWE-89
References: https://phabricator.wikimedia.org/T406380
CVE: CVE-2018-25118
Published: 2025-10-20
Description: GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life (EOL) by the vendor. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-19 08:55:13.141502 UTC.
CWE: CWE-78
References: https://github.com/mcw0/PoC/blob/fb06efe05b7e240dc88ff31eb30e1ef345509dce/Geovision-PoC.py#L15; https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a; https://www.exploit-db.com/exploits/43982
CVE: CVE-2025-11536
Published: 2025-10-20
Description: The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wp_ajax_import_elementor_template action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/tags/8.2.4/includes/setup-wizard/init.php#L420; https://www.wordfence.com/threat-intel/vulnerabilities/id/97c100c3-8a96-4198-b38a-206268ff20ec?source=cve
CVE: CVE-2025-12001
Published: 2025-10-20
Description: Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://azure-access.com/security-advisories
CVE: CVE-2025-54764
Published: 2025-10-20
Description: Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-208
References: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/; https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
CVE: CVE-2025-6541
Published: 2025-10-21
Description: An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://support.omadanetworks.com/en/document/108455/; https://www.omadanetworks.com/us/business-networking/all-omada-router/; https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
CVE: CVE-2025-6542
Published: 2025-10-21
Description: An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://support.omadanetworks.com/en/document/108455/; https://www.omadanetworks.com/us/business-networking/all-omada-router/; https://www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
CVE: CVE-2025-7850
Published: 2025-10-21
Description: A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.omadanetworks.com/en/document/108456/; https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/; https://www.omadanetworks.com/us/business-networking/all-omada-router/
CVE: CVE-2025-7851
Published: 2025-10-21
Description: An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://support.omadanetworks.com/en/document/108456/; https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/; https://www.omadanetworks.com/us/business-networking/all-omada-router/
CVE: CVE-2025-8078
Published: 2025-10-21
Description: A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-missing-authorization-vulnerabilities-in-zld-firewalls-10-21-2025
CVE: CVE-2025-9133
Published: 2025-10-21
Description: A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-and-missing-authorization-vulnerabilities-in-zld-firewalls-10-21-2025