{"id":"CVE-2025-26014","aliases":["EUVD-2025-4492","GHSA-h9hg-544v-fh29"],"status":"published","title":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute...","description":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.0108,"percentile":0.65352,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2025-02-21T00:00:00Z","modified":"2026-06-17T09:01:25Z","exploits":[{"source":"pocgithub","id":"vigilante-1337/CVE-2025-26014","title":"vigilante-1337/CVE-2025-26014","date":"2025-04-29","url":"https://github.com/vigilante-1337/CVE-2025-26014"}],"products":[{"vendor":"olajowon","product":"loggrove"}],"references":[{"url":"https://gitee.com/olajowon/loggrove/issues/IBJT1K","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/olajowon/loggrove/","tags":["Product"]},{"url":"https://gitee.com/olajowon/loggrove/","tags":["Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26014"},{"url":"https://gitee.com/olajowon/loggrove"},{"url":"https://github.com/olajowon/loggrove"},{"url":"https://github.com/advisories/GHSA-h9hg-544v-fh29"}],"sources":{"cve":[{"id":"CVE-2025-26014","description":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.","status":"published","published":"2025-02-21T00:00:00Z","modified":"2025-04-17T15:19:48.773Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:27.932735Z"}],"euvd":[{"id":"EUVD-2025-4492","description":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.","status":"published","published":"2025-02-21T00:00:00Z","modified":"2025-04-17T15:19:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:21.593744Z"}],"ghsa":[{"id":"GHSA-h9hg-544v-fh29","title":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute...","description":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.","status":"published","published":"2025-02-21T18:31:14Z","modified":"2025-04-17T18:32:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:01:37.946112Z"}],"nvd":[{"id":"CVE-2025-26014","description":"A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.","status":"published","published":"2025-02-21T17:15:14.68Z","modified":"2026-06-17T09:01:25.947Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:51.871789Z"}]}}