CVE-2025-3115

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficient validation of filenames during file uploads can enable attackers to upload and execute malicious files, leading to arbitrary code execution

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Apr 9, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-31166.5CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends specialCVE-2025-311602.9atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecifCVE-2025-311619.8CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instaCVE-2025-311626.6Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope functionCVE-2025-311636.6Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.CVE-2025-311646.6heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spliCVE-2025-311656.9Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JaCVE-2025-31175.4CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration fiCVE-2025-311709.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrityCVE-2025-311715.5File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect CVE-2025-311725.5Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect serCVE-2025-311736.5Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect ser