What’s Vulnerable › Vulnerabilities

CVE-2025-9999: Improper validation of payload elements

• Severity: high (CVSS 7.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-05 · updated 2026-06-17
• Weakness: CWE-940

Description

Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.

Affected products

• arcinfo PcVue: from 16.0.0 through 16.3.3; from 15.0.0 through 15.2.12; from 12.0.0 through 12.0.31

References

• https://www.pcvue.com/security/#SB2025-4

Get alerted when CVE-2025-9999 or the next vulnerability affects your stack