CVE-2025-8070

The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability. This allows a local attacker to execute arbitrary code by placing a malicious executable in a predictable location such as C:\Program.exe. If the service runs with elevated privileges, exploitation results in privilege escalation to SYSTEM level. This vulnerability arises from an unquoted service path affecting systems where the executable resides in a path containing spaces. Affected products and versions include: ABP 2.0.7.6130 and earlier as well as AES 1.0.6.6133 and earlier.

• CWE-428

• https://www.asustor.com/security/security_advisory_detail?id=47

Published

Jul 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8064The Bible SuperSearch plugin for WordPress is vulnerable to …6.4
• CVE-2025-8065A stack-based buffer overflow vulnerability was identified i…6.5
• CVE-2025-8066URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.8
• CVE-2025-8067A flaw was found in the Udisks daemon, where it allows unpri…8.5
• CVE-2025-8068The HT Mega – Absolute Addons For Elementor plugin for WordP…4.3
• CVE-2025-8069During the AWS Client VPN client installation on Windows dev…7.8
• CVE-2025-8071Mine CloudVod plugin for WordPress is vulnerable to Stored C…6.4
• CVE-2025-8072The Target Video Easy Publish plugin for WordPress is vulner…6.4
• CVE-2025-8073The Dynamic AJAX Product Filters for WooCommerce plugin for …6.4
• CVE-2025-8074Origin validation error vulnerability in BeeDrive in Synolog…5.6
• CVE-2025-8075Cybersecurity Nozomi Networks Labs, a specialized security c…5.4
• CVE-2025-8076There is a vulnerability in the Supermicro BMC web function …7.2