CVE-2025-51539: EzGED3 · Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium · fixed in 3.5.72.27183 : update affected systems when convenient.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.7% chance of exploitation in 30 days – higher than 53% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 3.5.72.27183
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 19 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
European organizations should immediately verify if they are running EzGED3 version 3.5.0 or any version prior to 3.5.72.27183 and prioritize upgrading to the patched version 3.5.72.27183. Until patching is complete, organizations should restrict external access to the EzGED3 web interface using network-level controls such as firewalls, VPNs, or IP whitelisting to limit exposure. Implement web application firewalls (WAFs) with rules to detect and block directory traversal attempts targeting the vulnerable script. Conduct thorough audits of server file permissions and remove or restrict access to sensitive files and database dumps. If phpMyAdmin or similar tools are exposed, restrict their access or secure them with strong authentication and network segmentation. Monitor logs for unusual file access patterns or repeated attempts to exploit path traversal. Additionally, perform regular backups of critical data and ensure incident response plans are updated to address potential data breaches stemming from this vulnerability. Finally, conduct security awareness training for administrators to recognize and respond to exploitation attempts.
Description
EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interface. A remote attacker can supply a crafted path parameter to a PHP script to read arbitrary files from the filesystem. The script lacks both authentication checks and secure path handling, allowing directory traversal attacks (e.g., ../../../) to access sensitive files such as configuration files, database dumps, source code, and password reset tokens. If phpMyAdmin is exposed, extracted credentials can be used for direct administrative access. In environments without such tools, attacker-controlled file reads still allow full database extraction by targeting raw MySQL data files. The vendor states that the issue is fixed in 3.5.72.27183.