CVE-2025-63994

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2018-9206. Reason: This record is a duplicate of CVE-2018-9206. Notes: All CVE users should reference CVE-2018-9206 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Published

Nov 18, 2025

Last Modified

Aug 12, 2026

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63955A Cross-Site Request Forgery (CSRF) vulnerability in the man…7.5
• CVE-2025-63958MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensit…9.8
• CVE-2025-6396Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-6397Improper Neutralization of Input During Web Page Generation …8.6
• CVE-2025-6398A null pointer dereference vulnerability exists in the IOMap…6.7
• CVE-2025-6399A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-6400A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B2019…8.8
• CVE-2025-6401A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B2019…3.5
• CVE-2025-64011Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct …4.3
• CVE-2025-64012InvoicePlane commit debb446c is vulnerable to Incorrect Acce…4.3
• CVE-2025-6402A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.11…8.8
• CVE-2025-64027Snipe-IT v8.3.4 (build 20218) contains a reflected cross-sit…6.1