CVE-2025-69108

CriticalCVSS 9.8

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

40th percentile — higher than 40% of all known CVEs

There is a vulnerability in Hot Coffee versions up to 1.7 that allows unauthenticated PHP object injection.

An attacker could exploit this vulnerability to perform unauthorized actions within the system, potentially leading to serious security breaches.

It is recommended to upgrade to the latest version of Hot Coffee to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.