What’s Vulnerable › Vulnerabilities

CVE-2025-50325

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-22 · updated 2026-10-13
• Weakness: CWE-693

Description

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip

References

• https://en.bandisoft.com/bandizip/help/zone-identifier/
• https://en.bandisoft.com/bandizip/history/
• https://github.com/OV-0-VO/Public-references/blob/main/CVE-2025-50325.md

Get alerted when CVE-2025-50325 or the next vulnerability affects your stack