CVE-2025-67160

HighCVSS 7.5

Published: 02/01/2026(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.84%

53th percentile - higher than 53% of all known CVEs

Summary

A directory traversal vulnerability was found in Vatilon version 1.12.37-20240124. It allows an attacker to access sensitive directories and files outside the intended scope.

Risk Assessment

The organization is at risk of confidential data leakage, such as configurations, passwords, or user data, which could lead to security breaches and reputational damage.

Recommendation

Immediately update Vatilon to the latest version that fixes this vulnerability. If an update is unavailable, deploy WAF rules to block paths containing '..' sequences.

Other vulnerabilities in Vatilon

CVE-2025-67159High
In Vatilon version 1.12.37-20240124, user credentials were found to be transmitted in plaintext. This means that passwords and logins can be intercepted by an attacker during network transmission.

Original NVD description (English source)

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.