CVE-2025-20075

7.2 highEPSS 0.4%

High (7.2). EPSS 0.4% chance of exploitation in the next 30 days.

Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0. Executing arbitrary backend Web API requests could potentially lead to rebooting the services.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2025-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN80527854/
https://www.info-brdg.co.jp/support/report/megane/sec20250201.html

Check your stack JSON