First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-14612

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Insecure Temporary File vulnerability in Altera Quartus Prime Pro

Installer (SFX)

on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Altera	Quartus Prime Pro	>= 24.1, <= 25.1.1

References

https://www.altera.com/security/security-advisory/asa-0004Vendor Advisory

Timeline

Published: Jan 7, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-146137.2The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0. This is d CVE-2025-146146.7Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer CVE-2025-146157.1The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi CVE-2025-146164.3The Recooty – Job Widget (Old Dashboard) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi CVE-2025-146175.3A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the componen CVE-2025-146184.3The Sweet Energy Efficiency plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capab CVE-2025-146199.8A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of CVE-2025-146209.8A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of CVE-2025-146219.8A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_u CVE-2025-146229.8A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file CVE-2025-146239.8A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /CVE-2025-146256.7Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus P

CVE-2025-14612: Medium severity, CVSS 6.7 | Vulnix