ZDI-CAN-28221 MEDIUM 5.0 Overdue Oct 03, 2025

EmbedThis

EmbedThis is a vendor known for embedded web server and IoT connectivity software used in various networked devices. This vulnerability has a CVSS score of 5.0 and requires adjacent network access with high complexity to exploit, but requires no authentication and results in low-level impacts to confidentiality, integrity, and availability. Security teams should monitor for patches from EmbedThis before the January 31, 2026 deadline and assess exposure in any embedded or IoT devices running their software on local networks.

Advisory Details
Researcher Discovered by: Tyler Zars
Reported October 03, 2025
Deadline January 31, 2026 75d overdue
CVSS Vector AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy