Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Leica Geosystems AG records in CISA KEVNo Leica Geosystems AG vulnerabilities are listed in CISA KEV.
Priority MEDIUM 62
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0017 · Published 2026-01-07 · No fix listed CWE-352
Priority MEDIUM 56
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00283 · Published 2025-12-24 · No fix listed CWE-79
