CVE-2025-41737

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Nov 18, 2025

CISA due date

—

The record

Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.

Ecosystem	Package	Introduced	Fixed