CVE-2025-52687
Low
Published: 16 July 2025
Published
16 July 2025
Modified
15 April 2026
KEV Added
—
Patch
—
CVSS Score v3.1
2.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.0019
40.1th percentile
Risk Priority
5
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2025-52687 is a low-severity Command Injection (CWE-77) vulnerability in Al Enterprise (inferred from references). Its CVSS base score is 2.4 (Low).
Operationally, ranked at the 40.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21577
Vulnerability details
Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service (DoS).
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Al Enterprise
—
inferred from references and description; NVD did not file a CPE for this CVE
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.