CVE-2025-9000: Mechrevo Control Center GX V2 reg File uncontrolled search path

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-15 · updated 2026-10-07
Weakness: CWE-426

Description

A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.

Affected products

Mechrevo Control Center GX V2: 5.56.51.48

References

https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
https://vuldb.com/cve/CVE-2025-9000
https://vuldb.com/submit/624903
https://vuldb.com/vuln/320029
https://vuldb.com/vuln/320029/cti
https://vuldb.com/?submit.624903

Get alerted when CVE-2025-9000 or the next vulnerability affects your stack