CVE-2026-25254

CRITICALCVSS 9.8

Improper authorization leads to Remote Code Execution via SocketIO interface.

Published 2026-09-22 · last modified 2026-09-22

Full record at NVD ↗

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.