What is the CVSS score of CVE-2025-59892?

CVE-2025-59892 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-59892?

Within 24 hours: Identify all systems running Sync Breeze Enterprise Server or Disk Pulse Enterprise v10.4.18 and document affected users and data access levels. Within 7 days: Implement network segmentation to restrict application access to business-critical systems; deploy WAF rules to detect and block suspicious cross-origin requests; enforce same-site cookie policies; and disable unnecessary features if possible. Within 30 days: Establish a continuous monitoring program for vendor patch releases and prepare for immediate deployment; conduct user awareness training on phishing and social engineering risks that could be used to exploit this vulnerability.

Diskpulse CVE-2025-59892

HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-01-28 cve-coordination@incibe.es

CSRF Diskpulse Syncbreeze Flexense

8.0

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-352 OWASP Top 10:2025 A01:2025 - Broken Access Control ASVS 5.0 V3 - Web Frontend Security Anti-CSRF tokens, SameSite cookies MITRE ATT&CK 1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	CVSS 8.0 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: Low. User interaction: Required. Exploitation requires authentication.
Exploit ScenarioDerived	An attacker (requires authentication) could exploit this vulnerability to compromise the affected system.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Classified as CWE-352 (Cross-Site Request Forgery (CSRF)). Affects Diskpulse. Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of proper CSRF token implementation. Among other things, it is possible, using a POST request to delete commands individually via '/delete_command?sid=', using the 'cid' parameter.

Know when Diskpulse gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 8.0 HIGH

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionCVE.org

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of proper CSRF token implementation. Among other things, it is possible, using a POST request to delete commands individually via '/delete_command?sid=', using the 'cid' parameter.

Executive ViewAI

Why It Matters

A high-severity CSRF vulnerability in Sync Breeze Enterprise Server and Disk Pulse Enterprise v10.4.18 allows authenticated attackers to manipulate other logged-in users into performing unauthorized actions, potentially compromising data integrity and system security. Organizations running these versions face immediate risk of unauthorized file operations, configuration changes, or data exfiltration performed on behalf of legitimate users.

Business Impact: High

Compensating Controls

Implement WAF rules to enforce strict CSRF token validation and block requests lacking proper origin headers; enforce SameSite=Strict cookie attributes application-wide; restrict application access via network segmentation to trusted networks only; disable cross-domain functionality if operationally feasible; monitor for suspicious cross-origin requests; enforce multi-factor authentication for administrative actions; and maintain close monitoring of vendor advisories for patch availability. Contact vendor immediately for emergency patch timeline.

Threat Intelligence Overview

EPSS Score

0.0%

Top 95% exploitable

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Open

Automatable· derived

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +40

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Cross-Site Request Forgery MEDIUM

Cross-Site Request Forgery exploits the automatic credential inclusion behavior of web browsers.

Affected Products (CPE)CVE.org

cpe:2.3:a:flexense:diskpulse:10.4.18:*:*:*:enterprise:*:*:*

cpe:2.3:a:flexense:syncbreeze:10.4.18:*:*:*:enterprise:*:*:*

More in Diskpulse

View all

CVE-2020-36927 HIGH This Week POC

7.8 Jan 16

Diskpulse versions up to 13.6.14 contains a vulnerability that allows attackers to potentially execute arbitrary code (C

CVE-2025-59894 HIGH This Week

8.0 Jan 28

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.

CVE-2025-59893 HIGH This Week

8.0 Jan 28

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.

CVE-2025-59891 HIGH This Week

8.0 Jan 28

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.

CVE-2025-59895 HIGH This Week

7.5 Jan 28

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulne

CVE-2018-10564 MEDIUM This Month

6.1 May 02

XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7. Rated medium severity (CVSS 6.1), this vulnerability is

CVE-2025-59900 MEDIUM This Month

5.4 Jan 28