AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-1417

UNKNOWN · CVSS N/A EPSS 0.16% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-05-21 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2025-1417
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%

Original NVD Description

In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by the MDM (Mobile Device Management). This information include user ids, email addresses, first names, last names and device UUIDs. The last one can be used for exploitation of CVE-2025-1416. Successful exploitation requires UUID of a targeted backup, which cannot be brute forced.  This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).