CVE-2025-68958CWE-362

Multi-thread race condition vulnerability in the card framework module

High · published January 14, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

⚡ A multi-thread race condition is lurking in the card framework module, ready to cause availability issues! 🏎️ Think of it like a busy restaurant where two chefs are accidentally trying to prepare the same dish at the same time, leading to confusion and delays in service. If they don't coordinate properly, one might end up ruining the order just as the other completes it! If exploited, this vulnerability could create chaos by interrupting service availability, leaving users in the lurch and potentially making your entire application unreliable. This could harm business operations and user trust—definitely not a situation any hero wants to face!

Put simply

Think of it like a busy restaurant where two chefs are accidentally trying to prepare the same dish at the same time, leading to confusion and delays in service. If they don't coordinate properly, one might end up ruining the order just as the other completes it! This vulnerability is due to a race condition in the card framework module, where multiple threads can interfere with each other, leading to unpredictable behavior and service interruptions.

What to do

If exploited, this vulnerability could create chaos by interrupting service availability, leaving users in the lurch and potentially making your entire application unreliable. This could harm business operations and user trust—definitely not a situation any hero wants to face! To safeguard against this, apply patches from the vendor immediately. Additionally, ensure your application implements proper synchronization mechanisms to manage multi-threading effectively. Regularly audit your system for potential race conditions as part of your security routine! You've got this! With these steps, you can lock down your systems and keep things running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-01-14T01:59Z
EPSS history
Timeline
  • 14 JAN 01:59Z
    Multi-thread race condition vulnerability in the card framework module
    cvelistv5