CVE-2025-0645

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Pyxis Signage: through 31012025.

• CWE-434

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404
• https://www.usom.gov.tr/bildirim/tr-25-0404

Published

Nov 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0637It has been found that the Beta10 software does not provide …9.8
• CVE-2025-0638The initial code parsing the manifest did not check the cont…7.5
• CVE-2025-0639An issue has been discovered affecting service availability …7.5
• CVE-2025-0640Authorization Bypass Through User-Controlled Key vulnerabili…4.7
• CVE-2025-0642Use of Hard-coded Credentials, Authorization Bypass Through …6.3
• CVE-2025-0643Improper Neutralization of Input During Web Page Generation …7.2
• CVE-2025-0646Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-0647In certain Arm CPUs, a CPP RCTX instruction executed on one …7.9
• CVE-2025-0648Unexpected server crash in database driver in M-Files Server…4.9
• CVE-2025-0649Incorrect JSON input stringification in Google's Tensorflow …7.5
• CVE-2025-0650A flaw was found in the Open Virtual Network (OVN). Speciall…8.1
• CVE-2025-0651Improper Privilege Management vulnerability in Cloudflare WA…7.1