CVE-2025-27920: Srimax Output Messenger Directory Traversal Vulnerability
Summary: CISA's Known Exploited Vulnerabilities catalog lists CVE-2025-27920, a directory traversal flaw in Srimax Output Messenger that lets an attacker reach sensitive files outside the intended directory. The agency sets a remediation due date of 2025-06-09 and records known ransomware campaign use as unknown.
Bottom line: The flaw can expose configuration files or arbitrary files to an attacker, and CISA's own entry cannot rule out ransomware use - so the 2025-06-09 deadline is the only firm date on record.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-27920Srimax
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026