Risk Value

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-26138 Mar 18, 17:15 MEDIUM This Month

Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Risk Value

NVD GitHub

CVSS 3.1

6.5

EPSS

0.1%

CVE-2025-26137 Mar 18, 17:15 HIGH This Week

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure LFI Risk Value

NVD GitHub

CVSS 3.1

7.5

EPSS

0.3%

CVE-2025-26138

EPSS 0% CVSS 6.5

MEDIUM This Month

Authentication Bypass Risk Value

NVD GitHub

CVE-2025-26137

EPSS 0% CVSS 7.5

HIGH This Week

PHP Information Disclosure LFI +1

NVD GitHub