CVE-2025-8663

8.8 highEPSS 0.3%

High (8.8) in upkeeper upkeeper manager. EPSS 0.3% chance of exploitation in the next 30 days.

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12.

Severity

CVSS 4.0

8.8 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

upkeeper:upkeeper_manager

References

https://support.upkeeper.se/hc/en-us/articles/22107280228252-CVE-2025-8663-Insertion-of-Sensitive-Information-into-Log-File

Check your stack JSON