{"id":"CVE-2025-41726","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-41726","generatedAt":"2026-10-28T10:36:21.328Z","title":"A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within…","description":"A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.","published":"2026-01-27T12:15:57.000Z","lastModified":"2026-06-17T09:23:03.000Z","status":"Deferred","sourceIdentifier":"info@cert.vde.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-190"],"affected":[],"epss":{"score":0.00482,"percentile":0.41369,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://certvde.com/de/advisories/VDE-2025-092","source":"info@cert.vde.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-41726","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}