What is the CVSS score of CVE-2025-70046?

CVE-2025-70046 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Oa Font Service are affected by CVE-2025-70046?

A critical vulnerability (CVE-2025-70046) in Miazzy oa-front-service allows attackers to inject untrusted functionality with a 9.8 CVSS severity rating, potentially enabling complete system…

How to fix or mitigate CVE-2025-70046?

Within 24 hours: Identify all systems running Miazzy oa-front-service and isolate affected instances from production networks; notify all stakeholders and initiate incident response protocols. Within 7 days: Implement compensating controls including WAF rules to block malicious payloads, network segmentation to limit lateral movement, and enhanced monitoring for suspicious activity; evaluate alternative solutions. Within 30 days: Coordinate with Miazzy for patch availability; conduct full security assessment of affected systems; develop remediation plan including potential service replacement if patch timeline is uncertain.