CVE-2025-52861

HighCVSS 7.0

Published: 29/08/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.65%

50th percentile - higher than 50% of all known CVEs

Summary

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can exploit the vulnerability to read the contents of unexpected files or system data. The vulnerability has been fixed in VioStor 5.1.6 build 20250621 and later.

Risk Assessment

An attacker with administrator privileges can access sensitive files and system data, potentially leading to information disclosure.

Recommendation

Update VioStor to version 5.1.6 build 20250621 or later. Protect administrator accounts with strong passwords and restrict remote access.

Other vulnerabilities in VioStor

CVE-2025-52856Critical
An improper authentication vulnerability has been reported in VioStor. A remote attacker can exploit it to compromise the security of the system.

Original NVD description (English source)

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS