CVE-2025-26698

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

Metrics

CVSS 3.0 2.7/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-669

Affected software

Vendor	Product	Versions
J’s Communication Co., Ltd.	RevoWorks SCVX	4.0.234 and earlier 4 series versions; 5.0.7 and earlier 5 series versions
J’s Communication Co., Ltd.	RevoWorks Browser	2.2.100 and earlier 2 series versions; 3.0.1 and earlier 3 series versions

References

Timeline

Published: Feb 26, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-266997.5An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwr CVE-2025-26704.3IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST e CVE-2025-267005.2Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4 CVE-2025-2670110.0An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use CVE-2025-267027.5Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.CVE-2025-267034.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 CVE-2025-267044.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 CVE-2025-267057.5Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 CVE-2025-267065.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 CVE-2025-267075.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 CVE-2025-267084.2There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configu CVE-2025-267095.7There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized at