CVE-2025-27028

6.8 mediumEPSS 0.3%

Medium (6.8). EPSS 0.3% chance of exploitation in the next 30 days.

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and having restricted access (like, for example, the root password hash).

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-266
Published: 2025-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27028

Check your stack JSON