CVE-2025-35115

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-494

Affected software

Vendor	Product	Versions
Agiloft	Agiloft	< Release 30

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.jsonThird Party Advisory
https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+ResolutionRelease Notes, Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35115Third Party Advisory

Timeline

Published: Aug 26, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-35124.8There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be pas CVE-2025-35133.5The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users CVE-2025-35143.5The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users CVE-2025-35159.8The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient f CVE-2025-35165.9The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting them back in a page/CVE-2025-35176.3Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a prev CVE-2025-35184.3It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. The file upload CVE-2025-35197.0An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Every uploaded file in CVE-2025-35208.1The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versi CVE-2025-35216.4The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cr CVE-2025-35226.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is op CVE-2025-35236.4When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is show