Risk Value

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-26138 MEDIUM This Month

Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Risk Value

NVD GitHub

CVSS 3.1

6.5

EPSS

0.1%

CVE-2025-26137 HIGH This Week

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Lfi PHP Risk Value

NVD GitHub

CVSS 3.1

7.5

EPSS

0.3%

CVE-2025-26138

EPSS 0% CVSS 6.5

MEDIUM This Month

Authentication Bypass Risk Value

NVD GitHub

CVE-2025-26137

EPSS 0% CVSS 7.5

HIGH This Week

Information Disclosure Lfi PHP +1

NVD GitHub