CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2026-25254

Critical · CVSS 9.8
CVSS
9.8
nvd
EPSS
0.50%
41th pct
KEV
No
Class
other
CWE-285

Description

Improper authorization leads to Remote Code Execution via SocketIO interface.

References

Status: profiled · ingested 2026-09-25T18:00:19.000Z