EXPOSURES › CVE-2025-27920
CVE-2025-27920
HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 72/100
exploited-in-wildunpatched
Srimax Output Messenger had an unpatched directory traversal vulnerability exploited in the wild, potentially exposing sensitive files.
Srimax's Output Messenger suffered a directory traversal flaw that was actively exploited, allowing attackers to access unintended files, posing a significant security risk.
Shame score — Active exploitation of a known vulnerability in a widely used product.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.