CVE-2025-9999CWE-1288CWE-940
Improper validation of payload elements
High · published September 5, 2025
What it is
Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.
The record
Technical detail
- CVSS v4.0
- 7.6 · HIGH
- Vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Green
- EPSS
- 0.00158 · 4.6th percentile
- Weaknesses
- CWE-1288 · Improper Validation of Consistency within Input; CWE-940 · Improper Verification of Source of a Communication Channel
- Published
- 2025-09-05T16:41Z
EPSS history
Timeline