What’s Vulnerable › Vulnerabilities

CVE-2025-61156

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-29 · updated 2026-10-19
• Weakness: CWE-284

Description

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL.

References

• https://github.com/D7EAD
• https://github.com/D7EAD/CVE-2025-61156
• https://threatfire.informer.com/download/

Get alerted when CVE-2025-61156 or the next vulnerability affects your stack