What’s Vulnerable › Vulnerabilities

CVE-2025-26125

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-17 · updated 2026-06-17
• Weakness: CWE-782

Description

An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.

References

• https://github.com/ZeroMemoryEx/CVE-2025-26125
• https://github.com/ZeroMemoryEx/IObit-EoP
• https://x.com/zeromemoryex/status/1876878269200449819

Get alerted when CVE-2025-26125 or the next vulnerability affects your stack