CVE-2025-66837
Medium · 6.8CVSS
6.8
EPSS
0.3%
Published
Jan 7, 2026
CISA due date
—
The record
A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|