Grupo Castilla

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Grupo Castilla records in CISA KEV

No Grupo Castilla vulnerabilities are listed in CISA KEV.

2 records

TI-2025-27380 CVE-2025-41028 · GHSA-9c6x-55mp-cvpv

MEDIUM 48

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00471 Published 2025-10-20 No fix listed CWE-89

TI-2025-11434 CVE-2025-12461 · GHSA-vch3-8jh3-g32c

LOW 36

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00305 Published 2025-10-29 No fix listed CWE-522