CVE-2025-61934
Critical · 10.0CVSS
10.0
EPSS
0.7%
Published
Oct 23, 2025
CISA due date
—
The record
A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-75021 fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the… CWE-1327
- CVE-2026-20212 A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could… CWE-1327
- CVE-2026-72924 GitHub CLI (gh) is GitHub's official command line tool. CWE-1327
- CVE-2026-16713 IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote… CWE-1327
- CVE-2026-16503 Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that… CWE-1327
- CVE-2026-55641 9Router is an AI router & token saver. CWE-1327
- CVE-2026-0481 Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could… CWE-1327
- CVE-2026-42503 gopls by default communicates via pipe. CWE-1327