CVE-2025-10095
Last modified
CVE-2025-10095 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server's database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated database, separate from the main software's database. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server's database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated database, separate from the main software's database. This isolation limits the scope of the vulnerability to the SMPP server's operations. The vulnerability arises from improper sanitization of user input in the SMPP server's scripts. This issue has been fixed in version 6.11.
Metrics
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-10095?
How severe is CVE-2025-10095?
How do I fix CVE-2025-10095?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-1009An attacker could have caused a use-after-free via crafted X…9.8
- CVE-2025-10090A flaw has been found in Jinher OA up to 1.2. The impacted e…9.8
- CVE-2025-10091A vulnerability has been found in Jinher OA up to 1.2. This …9.8
- CVE-2025-10092A vulnerability was found in Jinher OA up to 1.2. This impac…9.8
- CVE-2025-10093A vulnerability was identified in D-Link DIR-852 up to 1.00C…7.5
- CVE-2025-10094An issue has been discovered in GitLab CE/EE affecting all v…6.5
- CVE-2025-10096A vulnerability was determined in SimStudioAI sim up to 1.0.…6.5
- CVE-2025-10097A vulnerability was identified in SimStudioAI sim up to 1.0.…9.8
- CVE-2025-10098A security flaw has been discovered in PHPGurukul User Manag…8.8
- CVE-2025-10099A weakness has been identified in Portabilis i-Educar up to …4.8
- CVE-2025-1010An attacker could have caused a use-after-free via the Custo…8.8
- CVE-2025-10100A vulnerability was detected in SourceCodester Simple Forum …9.8
Are you affected by CVE-2025-10095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST