CVE-2025-55618

7.3 highEPSS 0.2%

High (7.3) in hyundai navigation. EPSS 0.2% chance of exploitation in the next 30 days.

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-08-27
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

hyundai:navigation

References

https://github.com/MatJosephs/CVEs/tree/main/CVE-2025-55618

Check your stack JSON