CVE-2025-52856

CriticalCVSS 9.8

Published: 29/08/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.66%

50th percentile - higher than 50% of all known CVEs

Summary

An improper authentication vulnerability has been reported in VioStor. A remote attacker can exploit it to compromise the security of the system.

Risk Assessment

Unauthorized access and compromise of the VioStor system security are possible.

Recommendation

Update VioStor to version 5.1.6 build 20250621 or later.

Other vulnerabilities in VioStor

CVE-2025-52861High
A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can exploit the vulnerability to read the contents of unexpected files or system data. The vulnerability has been fixed in VioStor 5.1.6 build 20250621 and later.

Original NVD description (English source)

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS