August 2, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-13957NVD

Vulnerability Summary

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.
Severity Level
HIGH(7.5)
Published Date
Mar 10, 2026
Last Modified
Mar 10, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.45%Probability
Root Weakness (CWE)
CWE-798: Use of Hard-coded Credentials ↗
The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone

External References