VULNERABILITY INTELLIGENCE

CVE-2025-62625

CVSS score6 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-05-14

Last modified2026-06-17

Description

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.