What is the CVSS score of CVE-2025-52926?

CVE-2025-52926 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by CVE-2025-52926?

CVE-2025-52926 is a low-severity vulnerability in scan.rs in spytrap-adb (CVSS 2.7).. A patch is available.

How to fix or mitigate CVE-2025-52926?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu CVE-2025-52926

EUVD-2025-18859 LOW

Omission of Security-relevant Information (CWE-223)

2025-06-23 cve@mitre.org

GHSA-5p2p-6g2c-hf7m

Information Disclosure Ubuntu Debian

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Ubuntu

LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18859

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

CVE Published

Jun 23, 2025 - 01:15 nvd

LOW 2.7

DescriptionCVE.org

In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.

AnalysisAI

A security vulnerability in scan.rs in spytrap-adb (CVSS 2.7). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects scan.rs in spytrap-adb.

RemediationAI

Monitor vendor channels for patch availability.

Same weakness CWE-223 – Omission of Security-relevant Information

View all

CVE-2023-31191 HIGH

8.1

CVE-2023-29156 MEDIUM

6.8

CVE-2022-44646 MEDIUM

5.3

CVE-2026-31890 MEDIUM

4.8

CVE-2022-22563 MEDIUM

4.4

CVE-2023-28360 MEDIUM

4.3

CVE-2024-52813 MEDIUM

4.3

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Low

rust-spytrap-adb

Release	Status	Version
jammy	DNE	-
noble	DNE	-
oracular	ignored	end of life, was needs-triage
upstream	released	0.3.5
plucky	ignored	end of life, was needed
questing	needed	-

Debian

rust-spytrap-adb

Release	Status	Fixed Version	Urgency
trixie	fixed	0.3.5-1	-
forky, sid	fixed	0.3.5-4	-
(unstable)	fixed	0.3.5-1	-

CVE-2025-52926 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-52926

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-223 – Omission of Security-relevant Information

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code