What is the CVSS score of CVE-2025-49794?

CVE-2025-49794 has a contested CVSS base score of 9.1 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Is there a public PoC exploit available for CVE-2025-49794?

Yes, a public proof-of-concept exploit is available for CVE-2025-49794. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-49794?

Within 24 hours: Inventory all systems running RHEL 7-10 and OpenShift 4.12-4.20 and identify applications processing XML Schematron documents. Within 7 days: Apply Red Hat vendor patches to all affected RHEL and OpenShift instances per Red Hat security advisory. Within 30 days: Verify patch deployment across environment and implement input validation controls for XML Schematron processing where applicable.

CVE-2025-49794

EUVD-2025-18412 CRITICAL

Expired Pointer Dereference (CWE-825)

2025-06-16 secalert@redhat.com

Denial Of Service

Critical

Disputed · 9.1 Vendor: redhat

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Identify XML processing endpoint
Delivery

Craft malicious Schematron document with sch:name path elements
Exploit

Submit to parsing service
Execution

Trigger use-after-free during XPath evaluation
Impact

Application crash or undefined behavior

Vulnerability Assessment

Weakness	CWE CWE-825 OWASP Top 10:2025 A06:2021 - Vulnerable and Outdated Components ASVS 5.0 V15 - Secure Coding and Architecture Expired pointer prevention
Exploitation Conditions	Requires target application to parse attacker-controlled XML input using libxml2 with Schematron validation functionality enabled and processing XML documents containing 'sch:name path' schema elements. Most libxml2 deployments do not enable Schematron validation by default, limiting attack surface to applications explicitly implementing schema-based XML validation workflows. Attack vector is network-based (AV:N) with low complexity (AC:L) and no authentication required (PR:N), but exploitation depends on finding services that both accept external XML input and perform Schematron validation. No user interaction required (UI:N) once vulnerable parsing endpoint is identified. Exploitation is limited by non-default Schematron configuration requirement and specific schema element structure needed to trigger the use-after-free condition.
Impact	This vulnerability presents conflicting risk signals requiring careful interpretation. CVSS 9.1 suggests critical severity with network vector, no privileges required, and low attack complexity. However, EPSS 0.11% (30th percentile) indicates extremely low observed exploitation probability in real-world scanning data. Public POC availability confirms technical exploitability, yet absence from CISA KEV suggests no confirmed mass exploitation campaigns. The discrepancy likely stems from exploitation prerequisites: attackers need victim applications to parse attacker-supplied XML with Schematron validation enabled and specifically using 'sch:name path' elements. Most XML parsing occurs server-side with trusted inputs or without Schematron validation active. SSVC framework assessment: exploitation status is POC-only (not active), technical impact is total (crash plus potential undefined behavior), but automatability is limited by requirement for application-specific XML processing contexts. Priority depends on asset exposure: high priority for internet-facing services accepting untrusted XML with Schematron validation; medium-low for internal systems with controlled XML inputs. Red Hat's extensive patching across 40+ product variants demonstrates vendor concern, but EPSS data suggests defenders can prioritize based on actual XML processing exposure rather than raw CVSS score alone.
Exploit ScenarioDerived	Attacker crafts malicious XML document containing Schematron schema with specific 'sch:name path' elements designed to trigger use-after-free condition during XPath evaluation. Document is submitted to vulnerable web service, API endpoint, or file processing system that parses XML with libxml2 and Schematron validation enabled. Upon parsing, libxml2 frees XPath node memory prematurely then dereferences the freed pointer during validation, causing application crash (denial of service). Depending on memory layout and heap state, undefined behavior could potentially be weaponized for code execution, though publicly available POC demonstrates crash reliability rather than control flow hijacking.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Apr 19, 2026

Use-after-free in libxml2 XPath parsing allows remote attackers to crash applications via malicious XML Schematron documents. The vulnerability (CVSS 9.1) affects widespread Red Hat ecosystem products including RHEL 7-10 and OpenShift 4.12-4.20, with vendor patches available. Public exploit code exists but CISA KEV does not list active exploitation. EPSS score of 0.11% (30th percentile) suggests low observed exploitation probability despite critical CVSS rating and POC availability, indicating targeted research interest rather than mass exploitation.

Earlier versions of this analysis (1)

v1 Mar 14, 2026 - 21:59 CVSS 9.1

Use-after-free vulnerability in libxml2 that occurs during XPath parsing when processing XML documents with schematron <sch:name path="..."/> elements. This flaw affects any application using vulnerable versions of libxml2 and allows unauthenticated remote attackers to crash the application or potentially achieve code execution through a maliciously crafted XML document. The vulnerability has a critical CVSS score of 9.1 with high integrity and availability impact.

RemediationAI

Apply vendor-released patches immediately for internet-facing systems processing untrusted XML. Red Hat provides fixed versions: libxml2 0:2.9.1-6.el7_9.10 (RHEL 7), 0:2.9.7-21.el8_10.1 (RHEL 8), 0:2.9.13-10.el9_6 (RHEL 9), and 0:2.12.5-7.el10_0 (RHEL 10). OpenShift users should upgrade to patched container platform releases per advisories RHSA-2025:12098 through RHSA-2025:15828. Ubuntu users apply updates via USN-7694-1, Debian via DLA-4251-1. For systems unable to patch immediately, implement compensating controls: disable Schematron validation in XML parsing configurations if not operationally required (eliminates attack surface entirely but removes schema validation capability), implement strict input validation to reject XML documents containing 'sch:name' elements at application layer (reduces functionality for legitimate Schematron use cases), or restrict XML processing to trusted sources only via network segmentation and authentication (limits exposure but does not prevent insider threats or supply chain attacks). Monitor application logs for abnormal XML parsing crashes as potential exploitation indicators. Note that disabling Schematron affects schema-based validation workflows and may break dependent business processes.

Affected VersionsENISA

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On patch: 0:2.9.7-9.el8_4.6

Red Hat OpenShift Container Platform 4.18 patch: 418.94.202510230424-0

Red Hat OpenShift Container Platform 4.14 patch: 414.92.202510211419-0

Red Hat Enterprise Linux 8.2 Advanced Update Support patch: 0:2.9.7-9.el8_2.3

Red Hat Enterprise Linux 9 patch: 0:2.9.13-10.el9_6

RHOSS-1.36-RHEL-8 patch: 1.36.0-12

Red Hat Insights proxy 1.5 patch: sha256:c26d589f12647890b67aaa986f54d3f7c6f7f2563fb5a73f38d559e6138739d7

Red Hat Insights proxy 1.5 patch: sha256:e54a5a5f9d69dd6a03e2bcd845e2202910a188d266d4a79b12c387ceffc36f2d

Red Hat OpenShift Container Platform 4.20 patch: 4.20.9.6.202509251656-0

cert-manager operator for Red Hat OpenShift 1.16 patch: sha256:330e8b5ab4841a21f8f5f23cc7fb192197872f11639b12bf4b1e70831f636323

cert-manager operator for Red Hat OpenShift 1.16 patch: sha256:df852ad92734bc087e213e6c7075daf6d7010db4ab72919649736804e295a6a2

cert-manager operator for Red Hat OpenShift 1.16 patch: sha256:ec9c6b34a40da29f3ee89b361d94879025a998d34309bf3b63c555f3c225eb16

Red Hat Enterprise Linux 8.6 Telecommunications Update Service patch: 0:2.9.7-13.el8_6.10

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions patch: 0:2.9.13-1.el9_0.5

Red Hat OpenShift Container Platform 4.12 patch: 412.86.202510291903-0

File Integrity Operator 1 patch: sha256:86d2378dea6c26da92e19e1a8dc9c9fb0fa8587fd60f83e6cc4503153e753db9

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions patch: 0:2.9.7-16.el8_8.9

cert-manager operator for Red Hat OpenShift 1.16 patch: sha256:1abdfac084e7c86e7a93a19e5cf6b54db79b903bfb7474a42200f753b29eda4b

Red Hat OpenShift Container Platform 4.17 patch: 417.94.202510112152-0

Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions patch: 0:2.9.7-13.el8_6.10

RHOSS-1.36-RHEL-8 patch: 1.36.0-10

File Integrity Operator 1 patch: sha256:59fcdf4ea159ba76fdb582011263672646dd9d63304a91592c0a21d0f43986a4

Red Hat Enterprise Linux 7 Extended Lifecycle Support patch: 0:2.9.1-6.el7_9.10

Red Hat OpenShift Container Platform 4.13 patch: 413.92.202510150118-0

Red Hat Enterprise Linux 8 patch: 0:2.9.7-21.el8_10.1

RHOSS-1.36-RHEL-8 patch: 1.36.0-11

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions patch: 0:2.9.13-3.el9_2.7

Red Hat OpenShift Container Platform 4.19 patch: 4.19.9.6.202510140714-0

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support patch: 0:2.9.7-9.el8_4.6

Red Hat Enterprise Linux 8.8 Telecommunications Update Service patch: 0:2.9.7-16.el8_8.9

RHOSS-1.36-RHEL-8 patch: 1.36.0-9

Red Hat Web Terminal 1.11 on RHEL 9 patch: 1.11-8

RHOSS-1.36-RHEL-8 patch: 1.36.0-18

RHOSS-1.36-RHEL-8 patch: 1.36.0-4

Red Hat Web Terminal 1.12 on RHEL 9 patch: 1.12-4

Red Hat Web Terminal 1.11 on RHEL 9 patch: 1.11-19

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support patch: 0:2.9.7-13.el8_6.10

Red Hat Enterprise Linux 9.4 Extended Update Support patch: 0:2.9.13-10.el9_4

Red Hat Enterprise Linux 10 patch: 0:2.12.5-7.el10_0

RHOSS-1.36-RHEL-8 patch: 1.36.0-7

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Libxml2 is a widely-deployed XML parsing library used across Linux distributions and enterprise platforms. This CWE-825 (Expired Pointer Dereference) vulnerability occurs in the XPath expression evaluation engine when processing Schematron validation rules containing specific 'sch:name path' schema elements. The use-after-free condition arises when memory allocated for XPath node objects is freed prematurely but subsequently referenced during Schematron validation, creating a dangling pointer. The CVSS vector (AV:N/AC:L) indicates network-reachable exploitation with low complexity, while the I:H/A:H ratings reflect that successful exploitation can cause both integrity violations (undefined behavior potentially leading to memory corruption) and availability impact (application crash). Red Hat advisory data shows this affects libxml2 versions 2.9.1 through 2.12.5 across multiple product lines.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Sources disagree (Medium–Critical)

Vendor (redhat) PRIMARY 9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Ubuntu MEDIUM

SUSE CRITICAL

Red Hat 9.1 HIGH

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: redhat

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 19, 2026 - 20:29 vuln.today

v2 - CVSS changed

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 20, 2026 - 20:16 vuln.today

Public exploit code

CVE Published

Jun 16, 2025 - 16:15 nvd

CRITICAL 9.1

DescriptionCVE.org

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

Executive ViewAI

Why It Matters

CVE-2025-49794 is a critical use-after-free vulnerability in libxml2 affecting Red Hat Enterprise Linux 7-10 and OpenShift Container Platform 4.12-4.20 that enables remote denial-of-service attacks through malicious XML Schematron documents. While public exploit code exists and the CVSS score is 9.1, current exploitation remains minimal (EPSS 0.11%), but the broad exposure across enterprise infrastructure and container platforms warrants rapid patching to prevent opportunistic compromise.

Business Impact: High

Compensating Controls

Apply vendor patch. If patching is delayed: restrict XML Schematron document processing to trusted sources only, disable or isolate applications processing untrusted XML Schematron inputs, implement network segmentation to limit exposure of affected services, and monitor for abnormal application crashes or resource exhaustion.

Threat Intelligence Overview

Threat Score

5.3/10

Composite threat intelligence

EPSS Score

0.1%

Top 70% exploitable

Threat Intel

1 source

Exploit

POC

Public exploit code exists

Data Quality

7 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS CISA Vendor

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 0.1%

Patch available Yes

Active threat Yes

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +46

PoC: +20

Weaponized: 0

Threat intel: +10

Gov advisory: 0

Attack Technique

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Same weakness CWE-825 – Expired Pointer Dereference

View all

CVE-2024-23310 CRITICAL POC

9.8

CVE-2025-49795 HIGH POC

7.5

CVE-2026-58592 HIGH POC

8.9

CVE-2019-15691 HIGH POC

7.2

CVE-2024-23638 MEDIUM POC

6.5

CVE-2026-53006 CRITICAL

9.8

CVE-2026-52924 CRITICAL

9.8

CVE-2023-48694 CRITICAL

9.8

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Medium

libxml2

Release	Status	Version
oracular	ignored	end of life, was needs-triage
upstream	released	-
bionic	released	2.9.4+dfsg1-6.1ubuntu1.9+esm4
focal	released	2.9.10+dfsg-5ubuntu0.20.04.10+esm1
jammy	released	2.9.13+dfsg-1ubuntu0.8
noble	released	2.9.14+dfsg-1.3ubuntu3.4
plucky	released	2.12.7+dfsg+really2.9.14-0.4ubuntu0.2
trusty	released	2.9.1+dfsg1-3ubuntu4.13+esm8
xenial	released	2.9.3+dfsg1-1ubuntu0.7+esm9

USN-7694-1

Debian

Bug #1107755

libxml2

Release	Status	Fixed Version	Urgency
bullseye	fixed	2.9.10+dfsg-6.7+deb11u8	-
bullseye (security)	fixed	2.9.10+dfsg-6.7+deb11u9	-
bookworm	fixed	2.9.14+dfsg-1.3~deb12u3	-
bookworm (security)	fixed	2.9.14+dfsg-1.3~deb12u4	-
trixie	fixed	2.12.7+dfsg+really2.9.14-2.1+deb13u2	-
trixie (security)	fixed	2.12.7+dfsg+really2.9.14-2.1+deb13u1	-
forky, sid	fixed	2.15.1+dfsg-2	-
(unstable)	fixed	2.12.7+dfsg+really2.9.14-2	-

DLA-4251-1

SUSE

Severity: Critical

Product	Status
Container bci/kiwi:9.24.43-16.25 Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE	Affected
Container bci/spack:0.23.1-11.20 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/open-webui:0.6.9-10.36 Container containers/pytorch:2.7.0-nvidia-2.33 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-db:2.12.2-2.16 Container private-registry/harbor-nginx:1.21.5-2.15 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.5.1.7.28.2 Container suse/manager/5.0/x86_64/proxy-squid:5.0.5.1.7.26.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.5.1.7.26.2 Container suse/mariadb:10.11.11-68.18 Container suse/sle-micro/5.5/toolbox:14.2-3.12.59 Container suse/sle-micro/5.5:2.0.4-5.5.329 Container suse/sle-micro/base-5.5:2.0.4-5.8.185 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.354 Container suse/sle-micro/rt-5.5:2.0.4-4.5.430 Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image ai_15_6	Affected
Container private-registry/harbor-portal:1.1.0-1.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:5.1.0.6.21 Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/server-postgresql:5.1.2.6.13.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image proxy-httpd-image Image proxy-salt-broker-image Image proxy-squid-image Image server-database-migration-image Image server-image Image server-migration-14-16-image Image server-postgresql-image Image server-saline-image	Affected
Container suse/ltss/sle12.5/sles12sp5:8.5.107 Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand	Affected
Container suse/manager/4.3/proxy-httpd:4.3.15.9.63.43 Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE	Affected

Threat IntelligenceMISP

CISA Advisories

ICSA-26-134-16 ICSA-26-188-05

Sources: CISA (public domain)

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-49794 ADVISORY https://security-tracker.debian.org/tracker/dla-4251-1 ADVISORY https://ubuntu.com/security/notices/USN-7694-1 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02260/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02275/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02294/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02314/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02355/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20564/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20607/ REF https://access.redhat.com/errata/RHSA-2025:10630 REF https://access.redhat.com/errata/RHSA-2025:10698 REF https://access.redhat.com/errata/RHSA-2025:10699 REF https://access.redhat.com/errata/RHSA-2025:11580 REF https://access.redhat.com/errata/RHSA-2025:12098 REF https://access.redhat.com/errata/RHSA-2025:12099 REF https://access.redhat.com/errata/RHSA-2025:12199 REF https://access.redhat.com/errata/RHSA-2025:12237 REF https://access.redhat.com/errata/RHSA-2025:12239 REF https://access.redhat.com/errata/RHSA-2025:12240 REF https://access.redhat.com/errata/RHSA-2025:12241 REF https://access.redhat.com/errata/RHSA-2025:13335 REF https://access.redhat.com/errata/RHSA-2025:15397 REF https://access.redhat.com/errata/RHSA-2025:15827 REF https://access.redhat.com/errata/RHSA-2025:15828 REF https://access.redhat.com/errata/RHSA-2025:18217 REF https://access.redhat.com/errata/RHSA-2025:18218 REF https://access.redhat.com/errata/RHSA-2025:18219 REF https://access.redhat.com/errata/RHSA-2025:18240 REF https://access.redhat.com/errata/RHSA-2025:19020 REF https://access.redhat.com/errata/RHSA-2025:19041 REF https://access.redhat.com/errata/RHSA-2025:19046 REF https://access.redhat.com/errata/RHSA-2025:19894 REF https://access.redhat.com/errata/RHSA-2025:21913 REF https://access.redhat.com/errata/RHSA-2026:0934 REF https://access.redhat.com/errata/RHSA-2026:62549 REF https://access.redhat.com/errata/RHSA-2026:67857 REF https://access.redhat.com/errata/RHSA-2026:7519 REF https://access.redhat.com/security/cve/CVE-2025-49794 REF https://bugzilla.redhat.com/show_bug.cgi?id=2372373 REF https://cert-portal.siemens.com/productcert/html/ssa-253495.html REF https://cert-portal.siemens.com/productcert/html/ssa-577017.html REF https://gitlab.gnome.org/GNOME/libxml2/-/issues/931 REF https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back