What’s Vulnerable › Vulnerabilities

CVE-2025-8356: Path Traversal leading to RCE

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-08 · updated 2026-06-17
• Weakness: CWE-22

Description

In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.

Affected products

• Xerox FreeFlow Core: 8.0.4

References

• https://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf
• https://horizon3.ai/attack-research/attack-blogs/from-support-ticket-to-zero-day/

Get alerted when CVE-2025-8356 or the next vulnerability affects your stack