CVE-2025-54918

High · 8.8

CVSS

8.8

EPSS

25.3%

Published

Sep 9, 2025

CISA due date

—

The record

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

Ecosystem	Package	Introduced	Fixed