What is the CVSS score of CVE-2025-69621?

CVE-2025-69621 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-69621?

Within 24 hours: Identify all systems running Comic Book Reader v1.0.95 and restrict file import functionality or disable the application if non-essential. Within 7 days: Contact the vendor for patch availability timeline and evaluate alternative solutions or older stable versions without this vulnerability. Within 30 days: Implement a comprehensive remediation plan—either deploy a patched version when available, migrate to an alternative product, or implement robust network controls to prevent exploitation.

CVE-2025-69621

HIGH

External Control of File Name or Path (CWE-73)

2026-02-04 cve@mitre.org

RCE

8.1

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 04, 2026 - 02:16 nvd

HIGH 8.1

DescriptionCVE.org

An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information.

AnalysisAI

file import process of Comic Book Reader v1.0.95 contains a vulnerability that allows attackers to overwrite critical internal files, potentially leading to arbitrary code executi (CVSS 6.5).

Technical ContextAI

affects file import process of Comic Book Reader v1.0.95. An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information.