Difuse

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Difuse records in CISA KEV

No Difuse vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Kalmia · all components

TI-2025-40507 CVE-2025-65899 · GHSA-gxjq-f9vv-wjqm

MEDIUM 63

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00368 Published 2025-12-04 No fix listed CWE-204

TI-2025-40508 CVE-2025-65900 · GHSA-f6h7-jxqx-887x

MEDIUM 62

Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00326 Published 2025-12-04 No fix listed CWE-863