Oxide

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Oxide records in CISA KEV

No Oxide vulnerabilities are listed in CISA KEV.

1 record

TI-2025-40865 CVE-2025-66432 · GHSA-xg9f-qgvm-j933

LOW 22

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00242 Published 2025-11-30 Fixed in 17.1 CWE-420