CVE-2025-34098

A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposed via the management web interface. An authenticated attacker can exploit this flaw by submitting crafted filter expressions to the log_filter endpoint using the filterStr parameter. This input is processed by a backend parser that permits execution of file expansion syntax, allowing the attacker to retrieve arbitrary system files via the log viewing interface.

• CWE-200

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/riverbed_steelhead_vcx_file_read.rb
• https://vulncheck.com/advisories/riverbed-steel-head-vcx-authenticated-arbitrary-file-read
• https://www.exploit-db.com/exploits/42101

Published

Jul 10, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34092Rejected reason: Neither filed by Chrome nor a valid securit…
• CVE-2025-34093An authenticated command injection vulnerability exists in t…7.5
• CVE-2025-34094Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34095An OS command injection vulnerability exists in Mako Server …9.3
• CVE-2025-34096A stack-based buffer overflow vulnerability exists in Easy F…9.3
• CVE-2025-34097An unrestricted file upload vulnerability exists in ProcessM…8.6
• CVE-2025-34099An unauthenticated command injection vulnerability exists in…9.3
• CVE-2025-3410A vulnerability classified as critical was found in mymagicp…8.8
• CVE-2025-34100An unrestricted file upload vulnerability exists in BuilderE…9.3
• CVE-2025-34101An unauthenticated command injection vulnerability exists in…9.3
• CVE-2025-34102A remote code execution vulnerability exists in CryptoLog (P…9.3
• CVE-2025-34103An unauthenticated command injection vulnerability exists in…9.3