Threats Tagged 'cve-2025-63414'
View all threats tagged with 'cve-2025-63414'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-63414'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-63414 is a critical path traversal vulnerability in the Allsky WebUI that allows unauthenticated remote attackers to execute arbitrary commands on the underlying operating system via a crafted HTTP request to the /html/execute.php endpoint. This leads to full remote code execution without requiring authentication or user interaction. The vulnerability stems from improper input validation in the id parameter, enabling attackers to traverse directories and inject OS commands. With a CVSS score of 10.0, this flaw impacts confidentiality, integrity, and availability severely. Although no known exploits are currently reported in the wild, the ease of exploitation and the critical impact make it a significant threat. European organizations using Allsky WebUI are at risk, especially those in countries with higher adoption of this software or strategic targets for cyberattacks. Immediate mitigation involves restricting access to the vulnerable endpoint, applying patches once available, and implementing network-level protections. Countries like Germany, France, and the UK are likely most affected due to their technological infrastructure and usage patterns. Join the discussion | CVE Database V5 | 12/16/2025, 00:00:00 UTC Added: 12/16/2025, 16:41:13 UTC |
Showing 1 to 1 of 1 result