CVE-2025-25058

Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (esxi 8.0) & 2.2.3.0 (esxi 9.0) within Ring 1: Device Drivers may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-665

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01408.html

Published

Feb 10, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25052in OpenHarmony v5.0.3 and prior versions allow a local attac…5.5
• CVE-2025-25053OS command injection vulnerability in the WEB UI (the settin…8.8
• CVE-2025-25054Movable Type contains a reflected cross-site scripting vulne…6.1
• CVE-2025-25055Authentication bypass by spoofing issue exists in FileMegane…5.3
• CVE-2025-25056Cross-site request forgery vulnerability exists in Wi-Fi AP …4.3
• CVE-2025-25057in OpenHarmony v5.0.2 and prior versions allow a local attac…5.5
• CVE-2025-25059Uncontrolled search path for some Intel(R) One Boot Flash Up…6.7
• CVE-2025-2506When pglogical attempts to replicate data, it does not verif…5.3
• CVE-2025-25060Missing authentication for critical function vulnerability e…8.2
• CVE-2025-25061Unintended proxy or intermediary ('Confused Deputy') issue e…5.8
• CVE-2025-25062An XSS issue was discovered in Backdrop CMS 1.28.x before 1.…4.4
• CVE-2025-25063An XSS issue was discovered in Backdrop CMS 1.28.x before 1.…4.4