CVE-2025-1095

IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation (LPE). The vulnerability allows any interactively logged in users on the target computer to run commands with full privileges in the context of NT AUTHORITY\SYSTEM. This allows for a low privileged attacker to escalate their privileges. This vulnerability is due to an incomplete fix for CVE-2024-25029.

• CWE-420

• https://www.ibm.com/support/pages/node/7230335Vendor Advisory

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10944A weakness has been identified in yi-ge get-header-ip up to …5.1
• CVE-2025-10945A security vulnerability has been detected in nuz007 smsboom…5.1
• CVE-2025-10946A vulnerability was detected in nuz007 smsboom up to 01b2f35…5.1
• CVE-2025-10947A flaw has been found in Sistemas Pleno Gestão de Locação up…5.5
• CVE-2025-10948A vulnerability has been found in MikroTik RouterOS 7. This …8.8
• CVE-2025-10949A vulnerability was found in Changsha Developer Technology i…2.4
• CVE-2025-10950A vulnerability was determined in geyang ml-logger up to acf…6.3
• CVE-2025-10951A vulnerability was identified in geyang ml-logger up to acf…7.3
• CVE-2025-10952A security flaw has been discovered in geyang ml-logger up t…5.5
• CVE-2025-10953A security vulnerability has been detected in UTT 1200GW and…8.8
• CVE-2025-10954Versions of the package github.com/nyaruka/phonenumbers befo…7.5
• CVE-2025-10955Improper Neutralization of Input During Web Page Generation …6.1