CVE-2025-28041

8.6 highEPSS 0.3%

High (8.6) in liaoxuefeng itranswarp. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication.

Severity

8.6 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19