CVE-2026-25265High· 8.8▾ TwilightPrivilege escalation due to weak configuration while temporary file handling.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
Privilege escalation due to weak configuration while temporary file handling.
software_center = 1.17.1software_center = 1.19.1software_center = 1.21.0software_center = 1.22.1software_center = 1.25.1software_center = 1.26.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-25264High· 8.8Privilege escalation due to weak configuration during package extraction process.
CVE-2026-25254Critical· 9.8Improper authorization leads to Remote Code Execution via SocketIO interface.
CVE-2026-57559High· 7.8Memory corruption while processing service requests.
CVE-2026-57555High· 7.8Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57554High· 7.8Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57546High· 7.5Transient DOS when processing a continuous receive command with a zero-sized global configuration override.