2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-64075 | CRITICAL | 10 | 0.7% | Feb 11, 2026 | A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows ... |
| CVE-2025-12059 | CRITICAL | 9.8 | 0.3% | Feb 11, 2026 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry ... |
| CVE-2025-8668 | CRITICAL | 9.4 | 0.4% | Feb 11, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite So... |
| CVE-2025-8025 | CRITICAL | 9.8 | 0.5% | Feb 11, 2026 | Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinos... |
| CVE-2025-66277 | CRITICAL | 9.8 | 0.6% | Feb 11, 2026 | A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers ... |
| CVE-2025-7659 | CRITICAL | 9.1 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-52436 | CRITICAL | 9.6 | 7.5% | Feb 10, 2026 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerabi... |
| CVE-2025-11242 | CRITICAL | 9.8 | 0.3% | Feb 10, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Teknolist Computer Systems Software Publishing Industry and Trade In... |
| CVE-2025-66630 | CRITICAL | 9.4 | 0.5% | Feb 9, 2026 | Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying c... |
| CVE-2025-6830 | CRITICAL | 9.8 | 0.4% | Feb 9, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Info... |
| CVE-2025-66606 | CRITICAL | 9.6 | 0.2% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl... |
| CVE-2025-66603 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OP... |
| CVE-2025-66602 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access... |
| CVE-2025-15027 | CRITICAL | 9.8 | 0.4% | Feb 8, 2026 | The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including... |
| CVE-2025-64111 | CRITICAL | 9.8 | 1.2% | Feb 6, 2026 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, due to the insufficient patch for CVE-2024-... |
| CVE-2025-68121 | CRITICAL | 10 | 0.8% | Feb 5, 2026 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between th... |
| CVE-2025-68723 | CRITICAL | 9 | 0.3% | Feb 5, 2026 | Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin in... |
| CVE-2025-62616 | CRITICAL | 9.8 | 0.3% | Feb 4, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2025-62615 | CRITICAL | 9.8 | 0.4% | Feb 4, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2025-13375 | CRITICAL | 9.8 | 0.5% | Feb 4, 2026 | IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary c... |
| CVE-2025-64712 | CRITICAL | 9.8 | 0.6% | Feb 4, 2026 | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc... |
| CVE-2025-5329 | CRITICAL | 9.8 | 0.5% | Feb 4, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software ... |
| CVE-2025-59818 | CRITICAL | 9.8 | 0.5% | Feb 4, 2026 | This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file ... |
| CVE-2025-65078 | CRITICAL | 9.3 | 0.5% | Feb 3, 2026 | An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark device... |
| CVE-2025-62799 | CRITICAL | 9.8 | 0.5% | Feb 3, 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now