VULNERABILITY INTELLIGENCE

CVE-2025-13957

EPSS probability0.66%
CISA KEVNot currently listed
Published2026-03-10
Last modified2026-06-17

Description

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.

Weakness classification

  • cybersecurity@se.com: CWE-798

Primary references