CVE-2025-58426CWE-321

CVE-2025-58426

Medium · published October 16, 2025

CVSS v3.0
4.3
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2025-10-16T14:15Z
References (2)
https://jvn.jp/en/jp/JVN90757550/ · [email protected]https://www.desknets.com/neo/support/mainte/17475/ · [email protected]
EPSS history
Timeline
  • 16 OCT 10:03Z
    desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications
    cvelistv5