CVE-2025-13957CWE-798

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and…

High · published March 10, 2026

CVSS v4.0
7.5
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00646 · 50.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-03-10T12:19Z
EPSS history
Timeline
  • 10 MAR 12:19Z
    CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and…
    cvelistv5