Descor

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Descor records in CISA KEV

No Descor vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Infocad · all components

TI-2025-19724 CVE-2025-26853 · GHSA-r6gw-8vw8-65gm

MEDIUM 49

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00421 Published 2025-03-20 Fixed in 3.5.2.0 CWE-863

TI-2025-19723 CVE-2025-26852 · GHSA-8wwq-574q-q2j9

MEDIUM 49

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00409 Published 2025-03-20 Fixed in 3.5.2.0 CWE-89