SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2025-66286

MEDIUM · CVSS 4.7 EPSS 0.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-04-23 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.7. See the original NVD description below for full technical details.

CVE
CVE-2025-66286
Severity
MEDIUM
CVSS
4.7
EPSS
0.23%

Original NVD Description

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP requests bypass this signal handler.