CVE-2025-65078CWE-426

Untrusted search path vulnerability in Embedded Solutions Framework

Critical · published February 3, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00583 · 47.1th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2026-02-03T20:51Z
EPSS history
Timeline
  • 03 FEB 20:51Z
    Untrusted search path vulnerability in Embedded Solutions Framework
    cvelistv5