CVE-2025-11026

LOW

givanz Vvveb <1.0.7.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.325964
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.325964
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.657181

Scores

CVSS v3 3.5
EPSS 0.0034
EPSS Percentile 25.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-200 CWE-284
Status published
Products (1)
vvveb/vvveb < 1.0.7.2
Published Sep 26, 2025
Tracked Since Feb 18, 2026