CVE Watch5 jul 2026

CVE-2025-65480

An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Templates which are ex

CVSS

8.8

Alto

EPSS

0.7%

p49

KEV

—

Exploit Today

0-100

Publicado: 11 feb 2026 · Última mod.: 5 jul 2026 · CWE-78

EPSS · 30d

0.7%EPSS · 30 días0.7%

2026-06-302026-07-17

Descripción técnica

An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Templates which are executed when certain script conditions are fulfilled, leading to Remote Code Execution.

Referencias oficiales

github.comhttps://github.com/derekyjj/vulnerability-research/tree/main/CVE-2025-65480

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-341978.8 ALT

99.9%

KEV—80Apache ActiveMQ Improper Input Validation Vulnerability3d CVE-2024-121210.0 CRÍ

99.9%

KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability4d CVE-2026-398089.8 CRÍ

99.7%

KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability17h CVE-2022-262589.8 CRÍ

99.6%

KEV—80D-Link DIR-820L Remote Code Execution Vulnerability8d CVE-2026-422718.8 ALT

99.6%

KEV—80BerriAI LiteLLM Command Injection Vulnerability3d CVE-2021-252988.8 ALT

99.5%

KEV—80Nagios XI OS Command Injection8d