What is the CVSS score of CVE-2025-1782?

CVE-2025-1782 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Red Hat CVE-2025-1782

CRITICAL

Code Injection (CWE-94)

2025-04-14 secalert@redhat.com

Red Hat Code Injection RCE

9.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

May 26, 2026 - 17:22 vuln.today

cvss_changed

CVSS changed

May 26, 2026 - 17:22 NVD

9.9 (CRITICAL)

Analysis Generated

Mar 28, 2026 - 18:36 vuln.today

CVE Published

Apr 14, 2025 - 19:15 nvd

N/A

DescriptionCVE.org

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

AnalysisAI

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. No vendor patch available.

Technical ContextAI

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.