CVE-2025-44251

HighCVSS 7.5/10Last modified Jul 5, 2026

Related CVEs from 2025

CVE-2025-44266.0The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and AnnouncCVE-2025-44277.5An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resoCVE-2025-44288.8Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated atCVE-2025-44296.1The Gearside Developer Dashboard WordPress plugin through 1.0.72 does not sanitise and escape a parameter before outputting it back in the pCVE-2025-44308.6Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 CVE-2025-44314.3The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a mCVE-2025-44325.3A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows CVE-2025-44338.8Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "UsCVE-2025-44357.5When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and nCVE-2025-44375.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent uCVE-2025-44395.4An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 thaCVE-2025-44408.0A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of th
CVE-2025-44251: High severity, CVSS 7.5 | Vulnix