← Database

CVE-2025-27590

CRITICAL CVSS: 9.0 Published: 2025-03-03 Modified: 2026-06-17

Description

In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.

Affected Platforms

Oxidized Web Project Oxidized Web

Weakness Type

CWE-22, NVD-CWE-noinfo

References