CVE-2025-58272

Severity: low (CVSS 2.0 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-03 · updated 2026-10-18
Weakness: CWE-352

Description

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed.

Affected products

NTT EAST, Inc. Web Caster V130: through 1.08
NTT WEST, Inc. Web Caster V130: through 1.08

References

https://jvn.jp/en/jp/JVN65839588/
https://www.ntt-east.co.jp/info/detail/220903_01.html
https://www.ntt-west.co.jp/info/support/oshirase20250903.html

Get alerted when CVE-2025-58272 or the next vulnerability affects your stack