What’s Vulnerable › Vulnerabilities

CVE-2025-41429

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-19 · updated 2026-06-17
• Weakness: CWE-117

Description

a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.

Affected products

• appleple inc. a-blog cms: from 2.8.0 through 2.8.85; from 2.9.0 through 2.9.52; from 2.10.0 through 2.10.63; from 2.11.0 through 2.11.75; from 3.0.0 through 3.0.47; from 3.1.0 through 3.1.43

References

• https://developer.a-blogcms.jp/blog/news/JVNVU-90760614.html
• https://jvn.jp/en/vu/JVNVU90760614/

Get alerted when CVE-2025-41429 or the next vulnerability affects your stack