CVE-2025-27645

9.8 criticalEPSS 0.9%

Critical (9.8) in printerlogic. EPSS 0.9% chance of exploitation in the next 30 days.

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

printerlogic:vasion_print
printerlogic:virtual_appliance

References

https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
http://seclists.org/fulldisclosure/2025/Apr/18

Check your stack JSON