What’s Vulnerable › Vulnerabilities

CVE-2025-12382: Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-12 · updated 2026-10-18
• Weakness: CWE-22

Description

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Affected products

• AlgoSec Firewall Analyzer: a33.0, a33.0-build320, a33.10, a33.10-build210

References

• https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12382.htm

Get alerted when CVE-2025-12382 or the next vulnerability affects your stack