CVE-2025-59595

HighCVSS 7.5/10Last modified Oct 18, 2026

Description

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially crafted packet to a server in a non-default configuration and cause the server to crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Nov 4, 2025
Last modified: Oct 18, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-595966.5CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14 CVE-2025-596007.8Memory Corruption when adding user-supplied data without checking available buffer space.CVE-2025-596016.5Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device co CVE-2025-596037.8Memory Corruption when processing invalid user address with nonstandard buffer address.CVE-2025-596047.8Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.CVE-2025-596057.8Memory Corruption when processing device identifier strings that exceed the expected maximum length.CVE-2025-596067.8Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.CVE-2025-596077.8Memory Corruption when copying large input data exceeds normal allocation limits.CVE-2025-596095.5Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.CVE-2025-59617.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file CVE-2025-596106.4Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-596116.7Memory corruption in diagnostic services due to absence of input validation