Threats Tagged 'cve-2025-15061'
View all threats tagged with 'cve-2025-15061'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-15061'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-15061 is a critical OS command injection vulnerability in the Framelink Figma MCP Server's fetchWithRetry method. It allows remote attackers to execute arbitrary code without authentication by exploiting improper validation of user input used in system calls. The flaw enables full compromise of the affected server with high impact on confidentiality, integrity, and availability. No user interaction is required, and the vulnerability has a CVSS score of 9.8, indicating critical severity. Although no known exploits are currently reported in the wild, the ease of exploitation and potential damage make timely mitigation essential. European organizations using this product should prioritize patching or applying mitigations immediately. Countries with significant digital design and creative industries, as well as those with higher adoption of Framelink products, are at greater risk. Defenders must implement strict input validation, network segmentation, and monitor for suspicious activity related to this vulnerability. Join the discussion | CVE Database V5 | 01/23/2026, 03:20:19 UTC Added: 01/23/2026, 04:05:57 UTC |
Showing 1 to 1 of 1 result