VICIdial Group

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

VICIdial Group records in CISA KEV

No VICIdial Group vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24259 CVE-2025-34099 · GHSA-48rx-xrhh-96jc

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

MEDIUM 45

An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption is enabled (a non-default configuration).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01644 Published 2025-07-10 No fix listed CWE-20

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0