CVE-2025-11026
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."
- Affected products
- Givanz Vvveb
- Vvveb
- ≤ 1.0.7.2
- Fix
- Available
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 0.3% (27th percentile)
- Weakness
- CWE-284, CWE-200
- NVD status
- Analyzed
- Published
- 2025-09-26
No indexed exploits for CVE-2025-11026 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2025-11026 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.