AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-13925

CRITICAL · CVSS 9.8 EPSS 19.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-07-14 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-13925
Severity
CRITICAL
CVSS
9.8
EPSS
19.86%

Original NVD Description

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.