CVE-2025-58468

HighCVSS 8.8

Published: 10/06/2026(UTC)Updated: 05/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

A CSRF vulnerability in Notification Center allows remote attackers to exploit it to gain privileges or hijack user identities. The vulnerability has been fixed in Notification Center version 1.10.0.3291 and later.

Risk Assessment

The risk includes the possibility of user account takeover and privilege escalation, which can lead to unauthorized access to sensitive data and system functions.

Recommendation

It is recommended to immediately update Notification Center to version 1.10.0.3291 or later, which includes a fix for this vulnerability.

Other vulnerabilities in Notification Center

CVE-2025-54167High
A cross-site scripting (XSS) vulnerability has been reported in Notification Center. A remote attacker with an administrator account can exploit it to bypass security mechanisms or read application data.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS