VULNERABILITY INTELLIGENCE

CVE-2025-50125

EPSS probability0.54%
CISA KEVNot currently listed
Published2025-07-11
Last modified2026-06-17

Description

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation of host request header.

Weakness classification

  • cybersecurity@se.com: CWE-918

Primary references