CVE-2025-51726

CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification mechanisms, particularly on systems without strict SmartScreen or trust policy enforcement. Additionally, the installer lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeated WinDbg analysis. The binary consistently loads into predictable memory ranges, increasing the success rate of memory corruption exploits. These two misconfigurations, when combined, significantly lower the bar for successful supply-chain style attacks or privilege escalation through fake installers.

• CWE-327

• https://github.com/meisterlos/CVE
• https://github.com/meisterlos/CVE-2025-51726

Published

Aug 4, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-51684CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Script…6.1
• CVE-2025-5169A vulnerability classified as problematic has been found in …5.5
• CVE-2025-51691Cross-Site Scripting (XSS) vulnerability found in MarkTwo co…6.1
• CVE-2025-5170A vulnerability classified as critical was found in llisoft …9.8
• CVE-2025-5171A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-5172A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-5173A vulnerability has been found in HumanSignal label-studio-m…7.8
• CVE-2025-51733Cross-Site Request Forgery (CSRF) vulnerability in HCL Techn…5.5
• CVE-2025-51734Cross-site scripting (XSS) vulnerability in HCL Technologies…5.4
• CVE-2025-51735CSV formula injection vulnerability in HCL Technologies Ltd.…7.5
• CVE-2025-51736File upload vulnerability in HCL Technologies Ltd. Unica 12.…6.3
• CVE-2025-5174A vulnerability was found in erdogant pypickle up to 1.1.5 a…7.8