CVE-2025-61018

HighCVSS 7.5

Published: 23/06/2026(UTC)Updated: 13/10/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.68%

51th percentile - higher than 51% of all known CVEs

Summary

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Risk Assessment

An attacker can remotely cause the database server to become unavailable, disrupting applications that rely on Virtuoso.

Recommendation

Update openlink virtuoso-opensource to the latest available version that includes a fix for this vulnerability.

Other vulnerabilities in openlink virtuoso-opensource

CVE-2025-61028High
An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Original NVD description (English source)

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS