CVE-2025-0520

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

April 14, 2026

Last Seen

April 15, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical ShowDoc RCE Vulnerability Exploited in the Wild76.5

A critical vulnerability in ShowDoc, a document management service, is being actively exploited. Identified as CVE-2025-0520 with a CVSS score of 9.4, the flaw allows for unrestricted file uploads and remote code execution on vulnerable servers. Attackers are targeting versions prior to 2.8.7, which...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical ShowDoc RCE Vulnerability Exploited in the Wild

Apr 14·7 sources

Related Articles (4)

Malicious LLM proxy routers found in the wild

News.Risky.Biz·Apr 15

ShowDoc vulnerability actively exploited | brief

Scworld·Apr 14

Attackers target unpatched ShowDoc servers via CVE-2025

Securityaffairs.Co·Apr 14

Attackers target unpatched ShowDoc servers via CVE-2025

Securityaffairs.Co·Apr 14

Related Entities

Malware Zero-day Exploit Data Breach Phishing Remote Code Execution SonicWall Reconnaissance Campaign Stardrop Npm Campaign AudiA6 AWS Bain Booking.com Boston Consulting Group