CVE-2025-9000

A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.

CVSS 4.0

6.4CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

CWEs

CWE-426, CWE-427

Published

2025-08-15

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• mechrevo:control_center_gx_v2

References

• https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
• https://vuldb.com/cve/CVE-2025-9000
• https://vuldb.com/submit/624903
• https://vuldb.com/vuln/320029
• https://vuldb.com/vuln/320029/cti

Check your stackJSON