Vulnerabilities

TI-2025-40250 CVE-2025-65097

Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections

LOW 31

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00222 Published 2025-12-03 Fixed in 4.4.1-beta.2 CWE-284

TI-2025-40249 CVE-2025-65096

MEDIUM 57

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2025-12-03 Fixed in 4.4.1-beta.2 CWE-284

TI-2025-40213 CVE-2025-65027

LOW 33

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00349 Published 2025-12-03 Fixed in 4.4.1-beta.2 CWE-352

TI-2025-33914 CVE-2025-54071

HIGH 74

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00758 Published 2025-07-21 Fixed in 4.0.0-beta.4 CWE-434

TI-2025-33780 CVE-2025-53908

HIGH 75

RomM is a self-hosted rom manager and player.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.0054 Published 2025-07-16 Fixed in 3.10.3, 4.0.0-beta.3 CWE-26