CVE-2026-25707

HighCVSS 8.8/10Last modified Oct 25, 2026

Description

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-23

Affected software

No affected versions have been published.

Timeline

Published
Jun 29, 2026
Last modified
Oct 25, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-25714.3The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserSCVE-2026-257107.0The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmaCVE-2026-257117.5The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the CVE-2026-257127.5Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizationCVE-2026-257137.8A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafteCVE-2026-257144.3Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incCVE-2026-257159.8The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the devCVE-2026-257167.1Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without speCVE-2026-257189.1Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write CVE-2026-257205.4A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sCVE-2026-257218.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote coCVE-2026-257229.1Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with
CVE-2026-25707: High severity, CVSS 8.8 | Vulnix