VulnerabilityDeferred

CVE-2025-26698

If exploited, malicious files may be downloaded to the system where using the product.

LOW 2.7EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product.

CVSS 3.0: 2.7 LOWCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Weakness: CWE-669
Source: vultures@jpcert.or.jp

References

https://jscom.jp/news-20250217/
https://jvn.jp/en/jp/JVN91300609/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.