CVE-2025-14598

9.8 criticalEPSS 0.7%

Critical (9.8) in cloudilyaerp bet e-portal. EPSS 0.7% chance of exploitation in the next 30 days.

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudilyaerp:bet_e-portal

References

https://afnaan.me/cve/cve-2025-14598
https://cloudilyaerp.com/
https://github.com/Afnaan-Ahmed/CVE-2025-14598
https://www.kb.cert.org/vuls/id/361400

Check your stack JSON