CVE-2025-54964

An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may inject arbitrary executables. If the Job Service is configured for local-only access, this may allow for privilege escalation in certain situations. If the Job Service is network accessible, this may allow remote command execution.

• CWE-77

• https://www.baesystems.com/en-us/product/geospatial-exploitation-productsProduct
• https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54964Vendor Advisory

Published

Oct 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54957An issue was discovered in Dolby UDC 4.5 through 4.13. A cra…9.8
• CVE-2025-54958Powered BLUE 870 versions 0.20130927 and prior contain an OS…6.3
• CVE-2025-54959Powered BLUE Server versions 0.20130927 and prior contain a …5.3
• CVE-2025-5496ZohoCorp ManageEngine Endpoint Central versions earlier than…3.3
• CVE-2025-54962/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b…6.4
• CVE-2025-54963An issue was discovered in BAE SOCET GXP before 4.6.0.2. An …6.5
• CVE-2025-54965An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2.…6.1
• CVE-2025-54966An issue was discovered in BAE SOCET GXP before 4.6.0.2. Som…4.3
• CVE-2025-54967An issue was discovered in BAE SOCET GXP before 4.6.0.3. It …6.5
• CVE-2025-54968An issue was discovered in BAE SOCET GXP before 4.6.0.2. The…8.8
• CVE-2025-54969An issue was discovered in BAE SOCET GXP before 4.6.0.2. The…6.1
• CVE-2025-5497A vulnerability was detected in slackero phpwcms up to 1.9.4…9.8