What is the CVSS score of CVE-2026-0925?

CVE-2026-0925 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Discover are affected by CVE-2026-0925?

CVE-2026-0925 is a low-severity vulnerability (CVSS 2.7). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

How to fix or mitigate CVE-2026-0925?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Discover CVE-2026-0925

LOW

Improper Validation of Specified Quantity in Input (CWE-1284)

2026-01-26 3938794e-25f5-4123-a1ba-5cbd7f104512

Information Disclosure Discover

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 26, 2026 - 18:16 nvd

LOW 2.7

DescriptionCVE.org

Tanium addressed an improper input validation vulnerability in Discover.

AnalysisAI

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 2.7 LOW]

Technical ContextAI

Affects Discover. Tanium addressed an improper input validation vulnerability in Discover.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Discover

View all

CVE-2021-28117 HIGH This Week

7.5 Mar 20

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially

CVE-2025-15339 MEDIUM This Month

6.5 Feb 05

Tanium addressed an incorrect default permissions vulnerability in Discover. [CVSS 6.5 MEDIUM]

CVE-2025-15325 MEDIUM This Month

6.3 Feb 05

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 6.3 MEDIUM]

CVE-2026-1224 MEDIUM This Month

4.9 Jan 26

Tanium addressed an uncontrolled resource consumption vulnerability in Discover. [CVSS 4.9 MEDIUM]

Same weakness CWE-1284 – Improper Validation of Specified Quantity in Input

View all

CVE-2025-9316 MEDIUM POC

6.9

CVE-2026-49777 CRITICAL POC

10.0

CVE-2022-37134 CRITICAL POC

9.8

CVE-2021-43267 CRITICAL POC

9.8

CVE-2025-65548 CRITICAL POC

9.1

CVE-2023-54337 CRITICAL POC

9.1

CVE-2025-5349 HIGH POC

8.8

CVE-2026-55706 HIGH POC

8.3

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2026-0925 vulnerability details – vuln.today

Back

Discover CVE-2026-0925

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Discover

Same weakness CWE-1284 – Improper Validation of Specified Quantity in Input

Same technique Information Disclosure

Share

External POC / Exploit Code