CVE WatchJul 5, 2026

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.

CVSS

7.7

High

EPSS

0.3%

p22

KEV

—

Exploit Today

0-100

Published: May 5, 2025 · Last modified: Jul 5, 2026 · CWE-922

EPSS · 30d

0.3%EPSS · 30 days0.4%

2026-06-302026-07-17

Technical description

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-483527.5 HIG

37.8%

——11Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.14d CVE-2024-487708.2 HIG

35.0%

——11An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process.13d CVE-2025-281716.5 MED

21.8%

——7An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.13d