CVE-2025-53696

9.3 criticalEPSS 0.1%

Critical (9.3). EPSS 0.1% chance of exploitation in the next 30 days.

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2025-07-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/refs/heads/main/2025-03.txt

Check your stack JSON