CVE-2025-59460

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Oct 27, 2025

CISA due date

—

The record

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

Affected packages

Ecosystem	Package	Introduced	Fixed