CVE-2026-25204
Last modified
CVE-2026-25204 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Escargot | < 2026-03-28 |
References
- https://github.com/Samsung/escargot/pull/1554Issue Tracking, Patch
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-25204?
How severe is CVE-2026-25204?
How do I fix CVE-2026-25204?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-25198web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 …5.1
- CVE-2026-25199Instances deployed via the Proxmox extension allow unauthori…9.1
- CVE-2026-25200A vulnerability in MagicInfo9 Server allows authorized users…9.8
- CVE-2026-25201An unauthenticated user can upload arbitrary files to execut…8.8
- CVE-2026-25202The database account and password are hardcoded, allowing lo…9.8
- CVE-2026-25203Samsung MagicINFO 9 Server Incorrect Default Permissions Loc…7.8
- CVE-2026-25205Heap-based buffer overflow vulnerability in Samsung Open Sou…9.8
- CVE-2026-25206Out-of-bounds read vulnerability in Samsung Open Source Esca…9.1
- CVE-2026-25207Out-of-bounds write vulnerability in Samsung Open Source Esc…9.8
- CVE-2026-25208Integer overflow vulnerability in Samsung Open Source Escarg…9.8
- CVE-2026-25209Out-of-bounds read vulnerability in Samsung Open Source Esca…9.1
- CVE-2026-2521A weakness has been identified in Open5GS up to 2.7.6. This …9.8
Are you affected by CVE-2026-25204?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST