CVE-2025-63408

High · 7.8

CVSS

7.8

EPSS

0.4%

Published

Nov 18, 2025

CISA due date

—

The record

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.

Affected packages

Ecosystem	Package	Introduced	Fixed