PULSE
FEED
← All CVEs
CVE WatchSep 30, 2026

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.

CVSS

5.5

Medium

EPSS

0.1%

p1

KEV

—

Exploit Today

0

0-100

Published: Sep 3, 2025 · Last modified: Sep 30, 2026

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-10-042026-11-01
Technical description

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.

Official references
Related CVEs

No related CVEs by CWE or product.