CVE-2025-11022

CRITICAL EPSS 37.6%

Published Dec 9, 20256mo ago · Modified Jun 17, 20262w ago

9.6 CVSS 3.1

Critical

Published Dec 9, 2025 6mo ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-Site Request Forgery (CSRF) vulnerability in Personal Project Panilux allows Cross Site Request Forgery. This CSRF vulnerability resulting in Command Injection has been identified. This issue affects Panilux: before v.0.10.0. NOTE: The vendor was contacted and responded that they deny ownership of the mentioned product.

CVSS Details

Base Score

9.6

Exploitability

2.8

Impact

6.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Changed

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

37.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-352 Cross-Site Request Forgery (CSRF) Authentication

References 2

siberguvenlik.gov.tr https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0433
usom.gov.tr https://www.usom.gov.tr/bildirim/tr-25-0433

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.