CVE-2025-11017

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.

• CWE-404
• CWE-476
• CWE-476

• https://github.com/OGRECave/ogre/issues/3447Exploit, Issue Tracking
• https://github.com/user-attachments/files/22335685/poc.zipExploit
• https://vuldb.com/?ctiid.325960Permissions Required, VDB Entry
• https://vuldb.com/?id.325960Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.654456Third Party Advisory, VDB Entry
• https://github.com/OGRECave/ogre/issues/3447Exploit, Issue Tracking

Published

Sep 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11011A vulnerability was found in BehaviorTree up to 4.7.0. Affec…5.5
• CVE-2025-11012A vulnerability was determined in BehaviorTree up to 4.7.0. …7.8
• CVE-2025-11013A vulnerability was identified in BehaviorTree up to 4.7.0. …5.5
• CVE-2025-11014A security flaw has been discovered in OGRECave Ogre up to 1…7.8
• CVE-2025-11015A weakness has been identified in OGRECave Ogre up to 14.4.1…5.3
• CVE-2025-11016A security vulnerability has been detected in kalcaddle kodb…4.3
• CVE-2025-11018A flaw has been found in Four-Faith Water Conservancy Inform…7.5
• CVE-2025-11019A vulnerability has been found in Total.js CMS up to 19.9.0.…4.8
• CVE-2025-1102A CWE-346 "Origin Validation Error" in the CORS configuratio…7.1
• CVE-2025-11020An attacker can obtain server information using Path Travers…8.8
• CVE-2025-11021A flaw was found in the cookie date handling logic of the li…7.5
• CVE-2025-11022Cross-Site Request Forgery (CSRF) vulnerability in Personal …9.6