EMV vulnerabilities and threats

CVE-2025-69189 is a Missing Authorization vulnerability in EMV JobBank affecting versions up to and including 1.2.3. It allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access. The vulnerability has a high severity with a CVSS score of 7.3.

CVE-2025-69128 is a path traversal vulnerability in EMV JobCareer affecting versions up to and including 7.3. This vulnerability allows an attacker to improperly access files outside of restricted directories. The vulnerability has a high severity with a CVSS score of 8.6 and can cause denial of service. No official patch or remediation guidance is currently available from the vendor.

CVE-2025-60236 is a critical vulnerability in EMV Creatify versions up to and including 1.5. It involves deserialization of untrusted data, which allows an attacker to perform object injection. This vulnerability has a high CVSS score of 9.8, indicating it can lead to complete compromise of confidentiality, integrity, and availability without requiring user interaction or privileges.

CVE-2025-60231 is a critical deserialization of untrusted data vulnerability in EMV The Hospital software up to version 1.8.1. It allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS score of 9.8, indicating a severe risk with network attack vector and no required privileges or user interaction.