CVE-2025-41646
9.8
CRITICAL · CVSS 3.1 · EPSS 51.3% (pctl 99)
Patch early
EPSS 51.3% — above the 10% action threshold.
Description
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 51.27% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-704 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2025-06-06 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| kunbus | revpi status |
References
→ the Explorer · watch your stack · NVD